261550 - Crash on sites that try to install WindUpdates adware

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Jonathan Gardiner]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

Certain websites which attempt to install spyware from
http://www.windupdates.com/ use a horribly obfusicated JavaScript in order to
attempt to install adware on your computer. This script will crash both Firefox
PR1.0 and 0.9. The example URL is just one of many sites that use this script.

For some reason, this will not always cause a crash, but it will on a fairly
regularly basis. I suspect the obfusicated code may change. I will attach a copy
of the script which I know has crashed Firefox.

Reproducible: Sometimes
Steps to Reproduce:
1. Make sure JavaScript is enabled.
2. Browse to example URL.
Actual Results:  
Firefox.exe crashes in js3250.dll.


Talkback crash ID: TB983686X
Crash occurs in js3250.dll

Comment 1

[Jonathan Gardiner]

Attachment: Script from windupdates.com known to crash Firefox

If included in a simple HTML document, script will crash Firefox as of
September 25, 2004. It may or may not depend on external files at
windupdates.com.

Comment 2

[Jonathan Gardiner]

I have noticed that the example URL I originally posted no longer crashes my
Firefox, but other pages on that same website do. I am unsure as to why this is.

Comment 3

[Jonathan Gardiner]

After some experimentation, I realized this bug could only be reproduced with
Tabbrowser Extensions
<http://white.sakura.ne.jp/~piro/xul/_tabextensions.html.en> installed.

I believe this bug should be marked INVALID unless it can be shown that this is
really a bug in Firefox, and not just the extension. I shall inform the author
of the extension of this problem.

My apologies for not realizing this eariler.