The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Netscape Concurrency-related Memory Corruption Vulnerability
------------------------------------------------------------------------
SUMMARY
A vulnerability in Netscape browser allows remote attackers to corrupt the
memory of the browser by sending it malformed HTML content.
DETAILS
Vulnerable Systems:
* Netscape Browser version 8.1 in Windows 2000 SP4 fully patched
Immune Systems:
* Firefox version 1.5.0.6
When visiting the test link <http://lcamtuf.coredump.cx/ffoxdie.html>
http://lcamtuf.coredump.cx/ffoxdie.html (included to the original
vulnerability report related to Firefox) browser crashed immediately
generating Application Error. No user interaction was needed.
Solution status:
No updated version available from the vendor at the time of reporting.
Workarounds:
The following working workaround has been tested: Disable JavaScript
support from Tools / Options... / Site Controls.
Timeline:
18-Aug-2006 - Vulnerability confirmed in Netscape
19-Aug-2006 - Vendor was contacted
19-Aug-2006 - Security companies and several CERT units contacted
ADDITIONAL INFORMATION
The information has been provided by <mailto:juha-matti.laurio@netti.fi>
Juha-Matti Laurio.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
