Home page logo

fulldisclosure logo Full Disclosure mailing list archives

IE sp2 and Mozilla Firefox DoS.
From: bipin gautam <visitbipin () yahoo com>
Date: Mon, 27 Dec 2004 10:25:07 -0800 (PST)

There is an issue with these browser rendering html's
with long titles. 
Only Tested on: 
Internet Explorer(SP2): 6.0.2900.2180 
Mozilla firefox: 1.0 

Not affected:
Mozilla Browser 

Have a look at, 
<head> <title>  ....(put)3.5 MB OF data....... 


For IE beyond 1 Mb will just do fine. On execution,
Mozilla Firefox starts filling up all the available
system memory with 100% CPU use. 

Internet explorer renders 100% CPU use, but no system
instability. (O; 
I've tested it on Windows XP SP2. 

Both Firefox & IE supports decompression method 'gzip'
ie. an extended request header named

By this way, the file can be kept around few kilobytes
in the server and delivered easily. I wonder, why
such... simple issue went un-noticed to everyone for
Bipin Gautam

Do you Yahoo!? 
The all-new My Yahoo! - Get yours free! 

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]