[37134] in bugtraq
Re: Mozilla Firefox (tested on 0.9.3) html-code crash.
daemon@ATHENA.MIT.EDU (Michal Zalewski)
Fri Oct 29 13:30:53 2004
Date: Fri, 29 Oct 2004 10:46:23 +0200 (CEST)
From: Michal Zalewski <lcamtuf@coredump.cx>
To: ducch apple <admin@elroyfam.com>
Cc: bugtraq@securityfocus.com
In-Reply-To: <20041025110901.11727.qmail@www.securityfocus.com>
Message-ID: <20041029104413.G36947@dekadens.coredump.cx>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Mon, 25 Oct 2004, ducch apple wrote:
> Viewing a page with the content:
>
> <HTML><INPUT^@AAAAAAAAAA>
>
> Would cause Firefox to crash.
Indeed (note that ^@ stands for character 0x00). This happens to be a
carbon copy of one of the test cases I posted a while ago in the "Web
browsers - a mini farce" thread. This very problem is already fixed in
nightly builds of Mozilla for quite a while.
You probably should either attribute it properly, or refrain from
re-posting problems reported just days ago altogether...
--
------------------------- bash$ :(){ :|:&};: --
Michal Zalewski * [http://lcamtuf.coredump.cx]
Did you know that clones never use mirrors?
--------------------------- 2004-10-29 10:44 --
http://lcamtuf.coredump.cx/photo/current/
