|
Mozilla browser "about:" exploit
|
|
Dec. 08, 2004, 08:08 AM
Post: #1
|
|||
|
|||
|
Here is a crash exploit which works on Mozilla browsers:
http://maas-online.nl/security/poc-mozilla-crash.html The crash actually occurs when the browser tries to print an iframe, but I think that allowing the use of about: <string> is inadvisable when it comes from web pages. I wrote a filter to stop it. If anybody has any suggestion for improvement, I'd welcome it. For example, can other tags be used for such a thing, and is "src=" the only way in which something like that could be set up? Code: Name = "About: * Exploit (Mozilla)" |
|||
|
« Next Oldest | Next Newest »
|
| Messages In This Thread |
|
[] - Siamesecat - Dec. 08, 2004 08:08 AM
[] - Siamesecat - Dec. 09, 2004, 06:30 AM
[] - Siamesecat - Dec. 10, 2004, 07:39 AM
[] - Siamesecat - Dec. 10, 2004, 08:13 AM
[] - Siamesecat - Dec. 12, 2004, 07:21 AM
|

Search
Member List
Calendar
Help





![[-]](images/ONi/collapse.gif)