Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-disclosure] Firefox 2.0.0.7 has a very serious calculation bug

Subject: Re: [Full-disclosure] Firefox 2.0.0.7 has a very serious calculation bug [FIB FOUND/CONFIRMED]
Date: Fri, 28 Sep 2007 10:39:10 -0700
IE7 was fine for me, showed up in FF 2.0.0.7

However, I think it's much wider-spread than initially thought.  I
found the same most unsettling results using:
javascript:4.2-0.1
javascript:3.2-0.1
javascript:2.2-0.1

I did not have time to try more, but obviously all of you can see the
possibilities.  Because it appears this works with any number, I've
dubbed it the FIB, (Firefox Infinite Bug).

I think this should get its own exploit category, too, since
assuredly, perhaps one day, this will be exploitable.

On 9/28/07, Steven Adair <steven@securityzone.org> wrote:
So are we dealing with an RDCB (Recently Disclosed Calculation Bug) or was
this just a mistake?

Steven

Actually, I see 5.1000000000000005 in both browsers.

Larry Seltzer
eWEEK.com Security Center Editor

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

<Prev in Thread] Current Thread [Next in Thread>