Closed Bug 295383 Opened 19 years ago Closed 19 years ago

Opening that URL causes browser and PC to crash. HTML exploit.

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 289864

People

(Reporter: game85, Unassigned)

References

(
URL
)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

Using this simple html <img src="3.jpg" height="9999999" width="9999999">
firefox can be crashed along with the user's PC.

Reproducible: Always

Steps to Reproduce:
1. Go to http://img.soaringrabbit.com/firefoxcrash.html using firefox 1.0.4


Actual Results:  
My PC froze for around 20 seconds before crashing.
The image itself is fine, stretching it to 9999999 causes a program hang and
eventually a window BSOD (on my machine, anyway) on the 1.0 branch. The trunk
seems fine (possibly the colspan fix?).

*** This bug has been marked as a duplicate of 289864 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.