Re: [Full-disclosure] Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)

["Jim Parkhurst" <JPARKHUR@xxxxxxxxxxxxxxx>]

Silly me. Since 
1. There was no version specific information provided by the OP (I looked for 
that) -and-
2. you tell me that "SVG [whatever that is] (including circle) was originally 
implemented in Firefox 1.5" -and-
3. There is no documentation that SVG has /not/ been removed from Firefox -and-
4. FF1 has been end-of-life'd, 

what was I thinking???

>>> Stuart Dunkeld <burningcows@xxxxxxxxx> 05/27/2009 13:49 >>>
On Wed, May 27, 2009 at 7:38 PM, Thierry Zoller <Thierry@xxxxxxxxx> wrote:
> Hi Jim,
>
> Read again:
> Affected : All Firefox versions that support SVG.
>
> Then think about what version of Firefox you are using.

SVG (including circle) was originally implemented in Firefox 1.5 -
https://developer.mozilla.org/en/SVG_in_Firefox_1.5 

--stuart

JP> Using FF2.0.0.20 and the file does not result in loss of use.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/