Register   FAQ   Login  

Secunia advisory SA17071 -- Mozilla Firefox vulnerability





AddThis Social Bookmark Button AddThis Feed Button

       2-spyware forum index -> Web browsers
Author Message
_FRG_
Guest





Post Post subject: Secunia advisory SA17071 -- Mozilla Firefox vulnerability Reply with quote

A vulnerability in Mozilla Firefox was found. It can be used to cause a Denial of Service attack that unexpectedly crashes Mozilla Firefox while opening a malformed web page.

From Secunia advisory:
"Tom Ferris has discovered a weakness in Firefox, which can be exploited by malicious people to cause a DoS (Denial of Service).

The weakness is caused due to an error in the handling of overly large size attributes in the "Iframe" tag. This can be exploited to crash a vulnerable browser via a specially crafted "Iframe" tag on a malicious web site.

The weakness has been confirmed in version 1.0.7 on Fedora Core 4 (Linux). Other versions and platforms may also be affected.

NOTE: The vendor has concluded that the weakness is caused due to an infinite recursion which causes a stack overflow, which only can be exploited to crash a vulnerable browser and cannot be exploited for code execution."

Solution: do not visit insecure web sites.

Danger: not critical.
Wed Oct 19, 2005 2:01 pm
Back to top
_FRG_
 
drcoolj999@



Joined: 27 May 2009
Posts: 49

Post Post subject: spyware Reply with quote

your article is really helping......
but how can someone find out which site is infected or insecure.
because all anti viruses are not going to show a unsecured site.
Mon Jun 01, 2009 2:17 am
Back to top
drcoolj999@ View user's profile Send private message Send e-mail
 
       2-spyware forum index -> Web browsers All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




Recommended software:
Spyware Doctor
(91/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
Malwarebytes Anti Malware
(89/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
Spy Sweeper
(85/100)
Spy Sweeper is one of the most powerful and effective spyware removers available today. This Webroot Software's product uses unique, patent-pending parasite detection and removal...
Windows Defender
(80/100)
Windows Defender is a free anti-spyware program made by the leading software company to add native spyware protection to its most popular product - the Microsoft Windows operating...
SUPERAntiSpyware
(75/100)
SUPERAntiSpyware is a powerful, highly effective spyware remover introducing advanced parasite detection and removal features along with reliable real-time protection. The program is not...
Encyclopedia of parasites: