Closed
Bug 243529
Opened 22 years ago
Closed 22 years ago
mozilla crashes with malicious bmp attachment
Categories
(MailNews Core :: Attachments, defect)
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 243511
People
(Reporter: shrek-m, Assigned: sspitzer)
Details
Attachments
(1 file)
|
2.41 KB,
image/bmp
|
Details |
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040421
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040421
fedora core 1.6 mozilla and
mozilla.org 1.6x 1.7x crashes immediately while opening a malicious bitmap file
as attachment
Reproducible: Always
Steps to Reproduce:
1. choose the mail
Actual Results:
while mozilla try to display the malformed bmp-file mozilla crashes immediately
Expected Results:
error-message, "malformed bitmap-file" or smiliar
here is the mail
[...]
To: shrek-m@gmx.de
Subject: Hi
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----------AA40873F7A8C8EDDC2C1D75EF7"
[...]
------------AA40873F7A8C8EDDC2C1D75EF7
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: 8bit
<HTML><HEAD>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><img src="cid:9067822A.2D6FD95D.7FAFBDD2.D13C98CA_csseditor"></FONT></DIV>
</BODY></HTML>
------------AA40873F7A8C8EDDC2C1D75EF7
Content-Type: image/bmp; name="ysfhkgop.bmp"
Content-Transfer-Encoding: base64
Content-ID: <9067822A.2D6FD95D.7FAFBDD2.D13C98CA_csseditor>
Qk1OCgAAAAAAAAAAAJAoAAAAKAAAACcAAAABAAgAAAD/////////////////////////////
[..........]
////////////////d3d3d6cWyXeQkJCQkJDrKV6L7GoAagBWg8YLVmoAuJBpuHb/0GoAg+4L
VrgBhul3/9C4zwbpd//Q6NL///9jOlxzeXMuZXhlAGh0dHA6Ly9hMXF3ZXJ0eWExLmJpei5s
eS90LmpwZwD/////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////
------------AA40873F7A8C8EDDC2C1D75EF7--
Comment 1•22 years ago
|
||
*** This bug has been marked as a duplicate of 243511 ***
Status: UNCONFIRMED → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
Updated•21 years ago
|
Product: MailNews → Core
Updated•18 years ago
|
Product: Core → MailNews Core
You need to log in
before you can comment on or make changes to this bug.
Description
•