Full Disclosure mailing list archives
Re: Firefox 2.0.0.3 Out-of-bounds memory access viaspecialy crafted html file
From: "Nikolay Kichukov" <hijacker () oldum net>
Date: Tue, 1 May 2007 15:26:05 +0300
Exploit works like a charm on FF 2.0.3 on win2k sp4. Regards, -Nikolay Kichukov ----- Original Message ----- From: "carl hardwick" <hardwick.carl () gmail com> To: <full-disclosure () lists grok org uk> Sent: Tuesday, May 01, 2007 10:26 AM Subject: [Full-disclosure] Firefox 2.0.0.3 Out-of-bounds memory access viaspecialy crafted html file
Product: Firefox 2.0.0.3 Description: Out-of-bounds memory access via specialy crafted html file Type: Remote Vulnerability can be exploited by using a large value in a href tag to create an out-of-bounds memory access. Proof Of Concept exploit: http://www.critical.lt/research/opera_die_happy.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file carl hardwick (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access viaspecialy crafted html file Nikolay Kichukov (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file Robert Wesley McGrew (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file Ismail Dönmez (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file Mihai Donțu (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file Alexander Bierbaumer (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file Stan Bubrouski (May 01)
- Re: Firefox 2.0.0.3 Out-of-bounds memory access via specialy crafted html file Andrew Redman (May 01)