[Full-disclosure] Firefox <= 2.0 crash

Matthew Flaschen matthew.flaschen at gatech.edu
Mon Oct 30 16:38:06 GMT 2006


Nothing happens when I load it in Firefox 2.0 on Windows XP.

Matthew Flaschen

Carlos Barros wrote:
> -------------------------------------------------
> Gotfault Security - Advisory #05 - 27/10/06
> -------------------------------------------------
> Software   : Firefox
> Homepage   : http://www.mozilla.com/
> Vulnerable : 1.5.0.7 and below, 2.0
> Risk       : Moderate
> Impact     : Denial of Services (Code execution not verified)
> -------------------------------------------------
> DESCRIPTION
> -------------------------------------------------
> Mozilla Firefox is prone to a D.O.S within its javascript Range object. In a
> special condition, a NULL Pointer Deference occur and Firefox crashes.
>>From DOM MDC:




Full-Disclosure is hosted and sponsored by Secunia.