Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-disclosure] MATIXHASU Firefox Browser DoS/Remote Code Execution

from [Andrew A] Network Security [Permanent Link]
Subject: [Full-disclosure] MATIXHASU Firefox Browser DoS/Remote Code Execution
Date: Sun, 30 Jul 2006 01:11:15 -0700 
SYSTEMS AFFECTED:

* All versions of Mozilla Firefox 1.5 up to latest on all operating systems.
Earlier versions of Firefox and other Mozilla browsers currently unconfirmed
* Camino, Opera, MSIE and Konqueror are not affected.

OVERVIEW:
Stacking multiple CSS style attributes across span tags leads to a race
condition
which can result in denial of service or arbitrary code execution.

PROOF OF CONCEPT:

DoS proof of concept is available by Tor hidden service:
http://k5goj46pmx25dxnl.onion/lar.html
Remote code execution exploit is available with Tor hidden service
connectback shell shellcode (custom shellcode available on request) for
Linux and Windows from BanLabs. Cost is approx $4000USD plus transfer fees.
Trades accepted. Email for more info.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Full-disclosure] MATIXHASU Firefox Browser DoS/Remote Code Execution, Andrew A <=
Previous by Date:  [Full-disclosure] X-Statics 1.20 SQL Injection Vulnerability, SirDarckCat
Next by Date:  [Full-disclosure] mitigating botnet C&Cs has become useless, Gadi Evron
Previous by Thread:  [Full-disclosure] X-Statics 1.20 SQL Injection Vulnerability, SirDarckCat
Next by Thread:  [Full-disclosure] mitigating botnet C&Cs has become useless, Gadi Evron
Indexes:  [Date] [Thread] [Top] [All Lists]