Full Disclosure mailing list archives

Firefox 2.0.0.7 has a very serious calculation bug


From: "carl hardwick" <hardwick.carl () gmail com>
Date: Fri, 28 Sep 2007 18:16:40 +0200

There's a flaw in Firefox 2.0.0.7 allows javascript to execute wrong
subtractions.

PoC concept here:
javascript:5.2-0.1
(copy this code into address bar)

Firefox 2.0.0.7 result: 5.1000000000000005 (WRONG!)
Internet Explorer 7 result: 5.1 (OK)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: