oss-sec mailing list archives

Re: CVE Request?: konqueror - https uses all ciphers, even weak ones

From: Felix Eckhofer <felix () tribut de>
Date: Tue, 04 Mar 2014 13:00:21 +0100

Hi.

Am 04.03.2014 12:24, schrieb Daniel Kahn Gillmor:

 Google Chrome doesn’t permit the link though, it just crashes :)


On what platform?  Is this for any connection, or just for a primary

connection? That is, can any web site can crash google chrome with<img

src="https://demo.cmrg.net/"; /> ?

On Ubuntu, both Google Chrome 33.0.1750.146 from the official Googlerepo as well as Chromium 32.0.1700.107 from Ubuntu's repo crashes whentrying to open the demo site and also when trying to open a page with animage embedded such as https://dump.tribut.de/democmrgnet.html



felix

Current thread:

Re: CVE Request?: konqueror - https uses all ciphers, even weak ones, (continued)
- Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Tim Brown (Mar 03)
  - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Kurt Seifried (Mar 03)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones cve-assign (Mar 03)
    - Re: Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Daniel Kahn Gillmor (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones John Haxby (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Daniel Kahn Gillmor (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Daniel Kahn Gillmor (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones John Haxby (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Daniel Kahn Gillmor (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Jann Horn (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Felix Eckhofer (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Moritz Naumann (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Hanno Böck (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Kurt Seifried (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones cve-assign (Mar 04)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones Daniel Kahn Gillmor (Mar 13)
    - Re: CVE Request?: konqueror - https uses all ciphers, even weak ones cve-assign (Mar 13)