Full Disclosure mailing list archives

Re: Firefox 2.0.0.7 has a very serious calculation bug


From: "Jimby Sharp" <jimbysharp () gmail com>
Date: Fri, 28 Sep 2007 22:04:56 +0530

How is this serious and is it related to security in any manner? If
not, please do not spam. :-(

And go and learn some floating point maths.

On 9/28/07, carl hardwick <hardwick.carl () gmail com> wrote:
There's a flaw in Firefox 2.0.0.7 allows javascript to execute wrong
subtractions.

PoC concept here:
javascript:5.2-0.1
(copy this code into address bar)

Firefox 2.0.0.7 result: 5.1000000000000005 (WRONG!)
Internet Explorer 7 result: 5.1 (OK)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: