Clan x86

Technical (Development, Security, etc.) => General Security Information => Topic started by: Newby on October 17, 2005, 09:25:29 AM

Title: New Firefox DoS
Post by: Newby on October 17, 2005, 09:25:29 AM
http://www.whitedust.net/speaks/1432/

Hahahaha. Wow. I wonder what causes it to explode over that..
Title: Re: New Firefox DoS
Post by: iago on October 17, 2005, 03:02:15 PM
I think I can summarize my feelings about this in a single word:

"So?"

DoS's are boring, unless you can take down something critical. 
Title: Re: New Firefox DoS
Post by: Quik on October 17, 2005, 06:52:51 PM
You can crash Firefox pretty easily many-a-way, this is unimportant. If you can obtain some of the code, and point out something it does that is worth a thought or two, this might actually be important.
Title: Re: New Firefox DoS
Post by: iago on October 17, 2005, 07:01:24 PM
Not really; the Mozilla team is usually pretty quick to fix crashes.  The main reason I worry about DoS is because you never know what it can lead to.  There have been lots of examples of a benign-looking DoS turning into an arbitrary code execution attack. 
Title: Re: New Firefox DoS
Post by: Quik on October 17, 2005, 08:41:05 PM
Quote from: iago on October 17, 2005, 07:01:24 PM
Not really; the Mozilla team is usually pretty quick to fix crashes. The main reason I worry about DoS is because you never know what it can lead to. There have been lots of examples of a benign-looking DoS turning into an arbitrary code execution attack.

I have seen a few examples of how to crash the browser, most of the time accidentally, that are still available.

This is what I was saying before, unless he can point out something interesting in the code, pay no heed.
Title: Re: New Firefox DoS
Post by: Joe on October 18, 2005, 07:50:55 AM
Quotefrom version 1.0.7 downward
Quotewill indeed need patching as soon as possible

Am I missing something, or does someone not share my opinion on why new software versions are released?
Title: Re: New Firefox DoS
Post by: MyndFyre on October 18, 2005, 07:40:44 PM
Quote from: Joe[e2] on October 18, 2005, 07:50:55 AM
Am I missing something, or does someone not share my opinion on why new software versions are released?
I'm sure someone does, Joe, but since you didn't tell us what your opinion is, how can we know for sure?
Title: Re: New Firefox DoS
Post by: Joe on October 19, 2005, 10:13:01 PM
That seeing as how it affects only versions 1.0.7 and downward, and the current version is 1.5.0, its already patched. Hows that for ASAP?
Title: Re: New Firefox DoS
Post by: Ergot on October 19, 2005, 11:16:48 PM
It doesn't affect the betas. And the current version is 1.4.x