This is not only Firefox 2.0.0.7. I still have
2.0.0.5 and it still shows the
5.1000000000000005. Of course if you understand floating point and the level of accuracy needed, I don't see how this could be serious.
And I don't see a way this being exploited to give RCE.
Jimby Sharp wrote:
How is this serious and is it related to security in any manner? If
not, please do not spam. :-(
And go and learn some floating point maths.
On 9/28/07, carl hardwick <hardwick.carl@gmail.com> wrote:
There's a flaw in Firefox 2.0.0.7 allows javascript to execute wrong
subtractions.
PoC concept here:
javascript:5.2-0.1
(copy this code into address bar)
Firefox 2.0.0.7 result: 5.1000000000000005 (WRONG!)
Internet Explorer 7 result: 5.1 (OK)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Received on Sep 28 2007
Intro
