Full Disclosure mailing list archives

Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability

From: "foo_labs () yahoo co in" <foo_labs () yahoo co in>
Date: Mon, 21 Nov 2005 22:04:45 -0800 (PST)

Is it just me or did this exploit just DOS'ed my
Firefox 1.0.7(Debian 
Linux).
Just try the Windows XP Link given in the POC URL.
Firefox just hung with 100% CPU utilization.
Same can be seen with Flock(http://flock.com).


Same with Firefox 1.5-rc3 on Windows 2003.


                
__________________________________ 
Start your day with Yahoo! - Make it your home page! 
http://www.yahoo.com/r/hs
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability securityadvisory (Nov 21)
- Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability Toufeeq Hussain (Nov 21)
  - Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability Michael Holstein (Nov 21)
  - Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability foo_labs () yahoo co in (Nov 21)
  - Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability Daniel Veditz (Nov 22)