Full Disclosure mailing list archives

Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability

From: Toufeeq Hussain <toufeeqh () gmail com>
Date: Tue, 22 Nov 2005 05:37:28 +0530

Hi,

securityadvisory wrote:

Computer Terrorism (UK)========================



Security Advisory (Reclassification) :: CT21-11-2005
-----------------------------------------------------


Title:            Microsoft Internet Explorer JavaScript Window()
Vulnerability

Is it just me or did this exploit just DOS'ed my Firefox 1.0.7(DebianLinux).

Just try the Windows XP Link given in the POC URL.
Firefox just hung with 100% CPU utilization.
Same can be seen with Flock(http://flock.com).

URL: http://www.computerterrorism.com/research/ie/poc.htm

-toufeeq
--
Blog:http://toufeeq.net

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability securityadvisory (Nov 21)
- Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability Toufeeq Hussain (Nov 21)
  - Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability Michael Holstein (Nov 21)
  - Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability foo_labs () yahoo co in (Nov 21)
  - Re: Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability Daniel Veditz (Nov 22)