1367922 - Mozilla Firefox 53.0.3 (64 bits) - Stack Overflow Denial of Service Exploit

Status: RESOLVED DUPLICATE of bug 485941

(Core :: SVG, defect)

Description

[Soufiane Boussali]

Attachment: Mozilla Firefox 53.0.3 (64 bits) - Stack Overflow Denial of Service Exploit.html

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:53.0) Gecko/20100101 Firefox/53.0
Build ID: 20170518000419
Firefox for Android

Steps to reproduce:

A stack overflow DoS vulnerability affecting Firefox versions 53.0.3 (64 bits) by 
This flaw does NOT affect ESR 45 or the latest version of the Tor Browser Bundle.
This flaw can be triggered by simply visiting a website with the PoC code embedded in it and requires no further user interaction nor does it require any special privileges.
Successful exploitation results in the browser tab crashing.


Actual results:

Full denial of service with Closing the browser

Comment 1

[Soufiane Boussali]

Mozilla Crash Report : https://crash-stats.mozilla.com/report/index/67df3105-d307-47cb-abb8-9722c0170525

Comment 2

[:Gijs (he/him)]

This is a known issue.

Comment 3

[Soufiane Boussali]

Attachment: POC

The issue persist always thanks to find in the attachments a Proof Of Concept for this exploitation.