Bugtraq mailing list archives

Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)

From: "Jim Parkhurst" <JPARKHUR () dot state tx us>
Date: Wed, 27 May 2009 10:56:56 -0500

If I understand the process, saving the text at [IV. Proof of concept] (following the "~~~..." to an .XHTML file, and 
launch the file using Firefox, I should lose functionality ("Browser doesn't respond any longer to any user input, all 
tabs are no longer accessible, your work if any  (hail to the web 2.0) might be lost.")

Using FF2.0.0.20 and the file does not result in loss of use. All tabs are functional. All JAVA links continue 
function.  Same result for naming the POC file to .HTML, .HTM.

Thierry Zoller <Thierry () Zoller lu> 05/26/2009 13:13 >>>



For  those that failed to reproduce, try naming the POC file with an XHTML
extension.

Current thread:

Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) Thierry Zoller (May 27)
- Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) Jim Parkhurst (May 27)
  - Re[2]: [Full-disclosure] Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) Thierry Zoller (May 27)
  - Re[2]: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) Vladimir '3APA3A' Dubrovin (May 27)