what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Dan Veditz

Firefox Interleaving Denial Of Service

Posted Oct 28, 2010

Authored by Dan Veditz

Firefox Interleaving document.write and appendChild denial of service exploit.

tags | exploit, denial of service

SHA-256 | 4727d96639dd01ea7d34a8043ef6ba030fec88e8c059e0c06387cafeff334b33

Download | Favorite | View

Mozilla Security Advisory 2004-07-07

Posted Jul 8, 2004

Authored by Dan Veditz, Mozilla Foundation | Site mozilla.org

Mozilla Security Advisory - Windows versions of Mozilla products pass URIs using the shell: scheme to the OS for handling. The effects depend on the version of windows, but on Windows XP it is possible to launch executables in known locations or the default handlers for file extensions. It could be possible to combine this effect with a known buffer overrun in one of these programs to create a remote execution exploit, although at this time we have confirmed only denial-of-service type attacks. Versions affected: Mozilla (Suite), Mozilla Firefox, Mozilla Thunderbird.

tags | advisory, remote, overflow, shell

systems | windows

SHA-256 | 57a70625f36b6696077650b535747f47f76c4268befe5b019d687be4e6f7857d

Download | Favorite | View