Re: Fire fox dos exploit

[Aaron Hopkins <lists () die net>]

On Wed, 31 May 2006, Josh Zlatin-Amishav wrote:

> Can you give us some more details, like versions and platforms affected? I 
> was unable to recreate this flaw using firefox 1.5.dfsg+1.5.0 on Debian 
> unstable.

The word-wrapping of his mail client broke the exploit.  If you clean that
up by only putting line-breaks between tags, it seems to work.  Try:

        http://static.die.net/firefox-marquee-dos/

This breaks Firefox/1.5.0.3 on Ubuntu 5.0.4 and WinXP, and Firefox/1.5.0.2
on Ubuntu 5.1.0.  The browser freezes and on Linux the window stops
repainting.

                                    -- Aaron