Full Disclosure mailing list archives

Re: firefox 2.0.0.2 crash


From: endrazine <endrazine () gmail com>
Date: Sun, 11 Mar 2007 22:09:18 +0100

Mihai Dontu a écrit :
On Friday 09 March 2007 20:31, Tõnu Samuel wrote:
  
Can be dupe but in fast browsing over topics I did not discovered this
exploit:

http://people.zoy.org/~sam/firefox-crash-save-session-before-clicking.gif
    

Makes gimp 2.2.12 segfault.

endrazine@localhost ~/firefox.crash $ gimp 
./firefox-crash-save-session-before-clicking.gif
GIF: too much input data, ignoring extra...
GIF: bogus character 0x00, ignoring.
GIF: too much input data, ignoring extra...
GIF: bogus character 0x00, ignoring.
GIF: bogus character 0x23, ignoring.
GIF: bogus character 0xf9, ignoring.
GIF: bogus character 0x04, ignoring.
GIF: bogus character 0x05, ignoring.
GIF: bogus character 0x0a, ignoring.
GIF: bogus character 0x00, ignoring.
GIF: bogus character 0x0e, ignoring.
GIF: bogus character 0x00, ignoring.

(gifload:8687): LibGimp-CRITICAL **: gimp_drawable_get: assertion `width 
0 && height > 0 && bpp > 0' failed
/usr/lib/gimp/2.0/plug-ins/gifload: fatal error: Erreur de segmentation
endrazine@localhost ~/firefox.crash $


Cheers,

endrazine



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: