Secunia advisory SA17071 -- Mozilla Firefox vulnerability

[_FRG_]

A vulnerability in Mozilla Firefox was found. It can be used to cause a Denial of Service attack that unexpectedly crashes Mozilla Firefox while opening a malformed web page.

From Secunia advisory:
"Tom Ferris has discovered a weakness in Firefox, which can be exploited by malicious people to cause a DoS (Denial of Service).

The weakness is caused due to an error in the handling of overly large size attributes in the "Iframe" tag. This can be exploited to crash a vulnerable browser via a specially crafted "Iframe" tag on a malicious web site.

The weakness has been confirmed in version 1.0.7 on Fedora Core 4 (Linux). Other versions and platforms may also be affected.

NOTE: The vendor has concluded that the weakness is caused due to an infinite recursion which causes a stack overflow, which only can be exploited to crash a vulnerable browser and cannot be exploited for code execution."

Solution: do not visit insecure web sites.

Danger: not critical.

[drcoolj999@]

your article is really helping......
 but how can someone find out which site is infected or insecure.
 because all anti viruses are not going to show a unsecured site.