[-] Date: February 24, 2010.
[-] Discovered by: Crux
[-] Exploit name: Mozilla Firefox 3.6 (memory corruption) Denial Of Service
[-] Tested on: 3.6 (latest)
================================================== ====

[-] PoC:
This certain vulnerability in Firefox 3.6 causes a denial of service. This happens when Firefox is forced to handle a long series of unclosed (improper) html code, such as, the marquee; which leads to memory corruption.

[~] Example: // Copy/paste and save the the following coding as poc.html, open in Firefox 3.6 //

http://crux.pastebin.com/abPSW6YF

================================================== ====


Would really appreciate if rsnake would help me spread it by blogging about it or mentioning it in a post.

Wow the ol' marquee bug rears it's head again!

...

You're stupid ? Why you steel ?

http://www.exploit-db.com/exploits/11347 => Mine

I've discovered it there are a long 4 month... And some stupid guys like you code another PoC and put there name... I've send message to delete you stupid rip.

he steels because he is steelman!


--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

Can we rename him? That would be awesome or maybe a static signature

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

@sirdarckcat awesome pic dude.

Flock Browser 1.2.6 is also afected and flock 2.5 too :P



Edited 1 time(s). Last edit at 04/01/2010 08:23AM by Lostmon.

Hard to believe that anyone (especially one who travels for a living), didn’t know that when your passport runs out of pages…..you get more pages..period.  Any Embassy or Consulate will (usually) do it while you wait abroad.  You never get a new passport until your old one expires, is lost or damaged.  Or cissp was the article just that more interesting with your particular slant?



Edited 1 time(s). Last edit at 05/27/2010 07:02AM by Gareth Heyes.

Anyone else find this spam stupidly funny? If not I'll remove it

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

I find it humorous that we're not being blocked by Pakistan.. guess we have to have a prophet drawing contest for that to happen.. :)

--thrill

---

It is not the degrees you hold, but the mind you possess. - thrill

@trill.