Crash on sites that try to install WindUpdates adware

RESOLVED INVALID

Status

()

Firefox
General
--
critical
RESOLVED INVALID
13 years ago
13 years ago

People

(Reporter: Jonathan Gardiner, Assigned: Blake Ross)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(URL)

Attachments

(1 attachment)

(Reporter)

Description

13 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

Certain websites which attempt to install spyware from
http://www.windupdates.com/ use a horribly obfusicated JavaScript in order to
attempt to install adware on your computer. This script will crash both Firefox
PR1.0 and 0.9. The example URL is just one of many sites that use this script.

For some reason, this will not always cause a crash, but it will on a fairly
regularly basis. I suspect the obfusicated code may change. I will attach a copy
of the script which I know has crashed Firefox.

Reproducible: Sometimes
Steps to Reproduce:
1. Make sure JavaScript is enabled.
2. Browse to example URL.
Actual Results:  
Firefox.exe crashes in js3250.dll.


Talkback crash ID: TB983686X
Crash occurs in js3250.dll
(Reporter)

Comment 1

13 years ago
Created attachment 160059 [details]
Script from windupdates.com known to crash Firefox

If included in a simple HTML document, script will crash Firefox as of
September 25, 2004. It may or may not depend on external files at
windupdates.com.
(Reporter)

Comment 2

13 years ago
I have noticed that the example URL I originally posted no longer crashes my
Firefox, but other pages on that same website do. I am unsure as to why this is.
(Reporter)

Comment 3

13 years ago
After some experimentation, I realized this bug could only be reproduced with
Tabbrowser Extensions
<http://white.sakura.ne.jp/~piro/xul/_tabextensions.html.en> installed.

I believe this bug should be marked INVALID unless it can be shown that this is
really a bug in Firefox, and not just the extension. I shall inform the author
of the extension of this problem.

My apologies for not realizing this eariler.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.