Remote DOS per Firefox 2.0.0.9

E’ stato individuato un bug che renderebbe vulnerabile Firefox 2.0.0.9 ad attacchi del tipo Denial Of Service.

L’attacco consisterebbe nelle seguenti righe di codice e permetterebbe ad un attaccante di far crashare il noto browser:

<script></script>

<iframe id="a" src="javascript:document.location='\x00res://'" width="100%" height="200"></iframe>

<iframe id="b" src="javascript:document.location='\x00about:config'" width="100%" height="200"></iframe>

<a href="#" onclick="javascript:document.location='\x00file:///'">test 1</a>

IL PoC lo trovate  cliccando quì. (Attenzione se usate firefox 2.0.0.9 con javascript abilitato il browser crasherà, disabilitandolo dovreste riuscire a farla franca, mentre Iexplorer non vi farà accedere alla pagina incriminata)

Il bug dovrebbe risiedere nel mancato controllo della dimensione dei caratteri nei messaggi di errore. Se infatti il testo del messaggio è troppo  piccolo, del tipo minore di 512 bytes, IExplorer ritornerà un proprio messaggio di errore evitando quindi il bug, mentre Firefox comincerà a risucchiare memoria fino al crash.

Via

  • Print this article!
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Google Bookmarks
  • Technotizie
  • FriendFeed
  • IndianPad
  • Live
  • Netvibes
  • Netvouz
  • NewsVine
  • Reddit
  • Segnalo
  • Slashdot
  • StumbleUpon
  • Twitter
  • Yahoo! Bookmarks

Commenti

  1. 34 comments su “Remote DOS per Firefox 2.0.0.9”

  1. [...] Dopo l’articolo sul DOS di Firefox 2.0.0.9 [...]

    Posted by Antonio Trigiani w3bL0g - Informatica Virale » Blog Archive » Google Vulnerabile ad attacchi XSS. 0day | novembre 10, 2007, 15:36
  2. Hello! dkgbgce interesting dkgbgce site! I’m really like it! Very, very dkgbgce good!

    Posted by Pharmd344 | aprile 24, 2014, 18:39
  3. Very nice site! cheap viagra

    Posted by Pharmd824 | aprile 24, 2014, 18:39
  4. Very nice site! [url=http://opeaixy.com/qsqsqa/2.html]cheap cialis[/url]

    Posted by Pharmc293 | aprile 24, 2014, 18:39
  5. Very nice site!

    Posted by Pharmg840 | aprile 24, 2014, 18:40
  6. I have been previously looking to find pretty eso gold definitely compliment in comfort frequent.these compliment totally!We were pleasantly impressed so how lovely they are usually! believe so good! They search beneficial. Which is the little Fourth eso gold eso gold but it will ‘t be a good last a long time :)

    Posted by eso gold | aprile 27, 2014, 14:44
  7. I simply want to say I’m very new to blogging and seriously savored this web blog. Likely I’m likely to bookmark your website . You certainly come with incredible article content. Bless you for sharing with us your web-site.

    Posted by Luigi Fulk | maggio 7, 2014, 04:48
  8. kelly bag inspired

    Posted by fake hermes birkin bag uk | maggio 8, 2014, 13:12
  9. Hands down, Apple’s app store wins by a mile. It’s a huge selection of all sorts of apps vs a rather sad selection of a handful for Zune. Microsoft has plans, especially in the realm of games, but I’m not sure I’d want to bet on the future if this aspect is important to you. The iPod is a much better choice in that case.

    Posted by good article | maggio 9, 2014, 08:59
  10. The new Zune browser is surprisingly good, but not as good as the iPod’s. It works well, but isn’t as fast as Safari, and has a clunkier interface. If you occasionally plan on using the web browser that’s not an issue, but if you’re planning to browse the web alot from your PMP then the iPod’s larger screen and better browser may be important.

    Posted by website lesbianporns.net | maggio 9, 2014, 17:36
  11. My Partner And I simply want to share it with you that I’m just raw to writing and incredibly liked your site. More than likely I am likely to remember your post post . You indeed have excellent article posts. Get Pleasure From it for discussing with us your blog post.

    Posted by Judy R. Stewart | maggio 9, 2014, 19:04
  12. You’ll find it practically not possible to come across well-educated visitors on this theme, regrettably you come across as like you realize exactly what you’re preaching about! With Thanks

    Posted by Paula D. Davis | maggio 10, 2014, 03:12
  13. Informative and precise

    Its difficult to find informative and accurate info but here I found

    Posted by Security Screens Sunshine Coast | maggio 10, 2014, 06:03
  14. This is getting a bit more subjective, but I much prefer the Zune Marketplace. The interface is colorful, has more flair, and some cool features like ‘Mixview’ that let you quickly see related albums, songs, or other users related to what you’re listening to. Clicking on one of those will center on that item, and another set of “neighbors” will come into view, allowing you to navigate around exploring by similar artists, songs, or users. Speaking of users, the Zune “Social” is also great fun, letting you find others with shared tastes and becoming friends with them. You then can listen to a playlist created based on an amalgamation of what all your friends are listening to, which is also enjoyable. Those concerned with privacy will be relieved to know you can prevent the public from seeing your personal listening habits if you so choose.

    Posted by browse website | maggio 10, 2014, 10:11
  15. You’re so awesome! I do not suppose I’ve read something like this before. So good to find someone with a few original thoughts on this topic. Really.. thank you for starting this up. This site is one thing that is needed on the web, someone with a little originality!

    Posted by pornarmy net | maggio 10, 2014, 18:40
  16. hermes birkin lemon yellow Remote DOS per Firefox 2.0.0.9

    Posted by discount hermes | maggio 10, 2014, 21:18
  17. Spot on with this write-up, I absolutely feel this website needs far more attention. I’ll probably be back again to read more, thanks for the information!

    Posted by good post | maggio 10, 2014, 23:13
  18. This blog is really interesting as well as diverting. I have chosen many useful advices out of this amazing blog. I’d love to visit it again and again. Thanks a lot!

    Posted by cleaning services orange county ca | maggio 11, 2014, 05:57
  19. To facilitate concern possibly will reach all punish on the contrary few.

    Posted by Debi Herrera | maggio 11, 2014, 06:45
  20. Wikia

    Wika linked to this website

    Posted by protection amulets | maggio 11, 2014, 07:38
  21. If you’re still on the fence: grab your favorite earphones, head down to a Best Buy and ask to plug them into a Zune then an iPod and see which one sounds better to you, and which interface makes you smile more. Then you’ll know which is right for you.

    Posted by navigate to sexblogpimp.com | maggio 11, 2014, 07:54
  22. Really enlightening data that you have mentioned, thanks a lot for setting up.

    Posted by Victoria D. Harrison | maggio 11, 2014, 11:26
  23. Right here is the perfect webpage for everyone who really wants to understand this topic. You know so much its almost hard to argue with you (not that I personally will need to…HaHa). You definitely put a fresh spin on a subject that’s been written about for a long time. Excellent stuff, just excellent!

    Posted by find more | maggio 11, 2014, 14:30
  24. Value filled content always welcomed

    Posted by noclegi Białogóra | maggio 12, 2014, 12:21
  25. Wikia

    Wika linked to this place

    Posted by Proyektor infocus | maggio 12, 2014, 13:58
  26. Best replica watches with genuine Swiss movement for sale
    replica watch

    Posted by replica watch | maggio 12, 2014, 15:52
  27. Digg

    While checking out DIGG today I noticed this

    Posted by catering midland tx | maggio 12, 2014, 17:21
  28. We simply have to tell you that I’m really novice to blogging and completely loved your article. Very likely I am inclined to save your article post . You indeed have extraordinary article topic. Delight In it for telling with us your internet site report.

    Posted by Anna H. Thompson | maggio 12, 2014, 20:07
  29. News info

    I was reading the news and I saw this really interesting information

    Posted by iherb coupon | maggio 12, 2014, 20:42
  30. Yahoo results

    While browsing Yahoo I discovered this page in the results and I didn’t think it fit

    Posted by Orange County Taco Catering | maggio 13, 2014, 04:22
  31. [url=http://www.nstgroup.co.uk/raybansunglasses/]fake ray bans[/url] [url=http://www.nstgroup.co.uk/raybansunglasses/]ray ban sunglasses[/url] [url=http://www.nstgroup.co.uk/raybansunglasses/]cheap ray bans[/url]

    Posted by fake ray bans | maggio 13, 2014, 07:22
  32. wonderful points altogether, you just gained a logo new reader. What could you suggest in regards to your publish that you just made a few days ago? Any certain?

    Posted by Smart Technology | maggio 13, 2014, 07:49
  33. you are truly a good webmaster. The website loading pace is incredible. It seems that you’re doing any unique trick. In addition, The contents are masterwork. you’ve done a excellent activity on this subject!

    Posted by special education | maggio 13, 2014, 08:01
  34. I am writing to make you know what a brilliant discovery my child enjoyed checking yuor web blog. She realized some pieces, most notably how it is like to possess a great giving spirit to make a number of people with no trouble know several advanced topics. You actually exceeded her expected results. Thank you for rendering those important, trusted, educational and in addition fun thoughts on this topic to Lizeth.

    Posted by Dating Website | maggio 13, 2014, 09:35

Inserisci un commento