Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Firefox 0.92 DoS via TinyBMP
From: st3ng4h <st3ng4h () comcast net>
Date: Mon, 12 Jul 2004 08:25:30 -0500

On Mon, Jul 12, 2004 at 01:23:39PM +0200, thE_iNviNciblE wrote:
there is a security vulnerability in Firebox 0.92 (latest Version)


this link causes that your virutal memory will be rise up 1,2 GB used 

maybe Thunderbird 0.72 is also vulnerable via HTML.

Are you certain this is a vuln in Firefox?

On W2K SP4 fully patched: I can verify that opening that page in 
Firefox 0.9.2 causes VM to balloon.

However, I get almost identical results opening the same page in IE 
6sp1, and can cause excessive VM consumption by opening little.bmp 
referenced in your page in MS Paint.


Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]