mailing list archives
Re: Possible DoS in TamperData Add-on v10.1.0 for FireFox 3.0.8
From: Valdis.Kletnieks () vt edu
Date: Sun, 03 May 2009 16:44:28 -0400
On Fri, 01 May 2009 23:59:35 +1000, Xia Shing Zee said:
The loop tries to constantly read the streaming HTTP data. Firefox will
become unresponsive and will offer the user to stop the script.
The script can be continued, but with files over 8.00mb there is a
possible DoS, as the script must constantly be 'continued'.
for a long time any firefox may run out of memory - don't do this
arrays are gonna get big and piggy, and trigger the "stop the script" warning.
Or can you verify that you're seeing some different issue?
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/