[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)



>Update:
>-------
>Patch was ineffective,  Length2 was fixed and both
>SVGNumber and SVGNumber2, but no SVGLength.
>
>Affected products :
>- All firefox versions below 3.5

If this bug includes version 3.5, there is a workaround:
Set your cache size to zero until an effective patch is
published.

When this bug kicked in on my copy of Ff3.5 I thought
the hard drive had blown a bearing from the noise it
made.  It hadn't ( whew ), and the workaround has
worked fine.

Best regards,

Neil Dickey, Ph.D.
email: neil@xxxxxxxxxxxx
Research Associate/Sysop
Geology Department
Northern Illinois University
DeKalb, Illinois, U.S.A.
60115