Bug#342550: firefox: Javascript, history.dat & DoS

2005-12-12 Thread Mike Hommey
tag 342550 - security severity 342550 important On Fri, Dec 09, 2005 at 10:25:04AM +0100, Florian Weimer <[EMAIL PROTECTED]> wrote: > * Mike Hommey: > > >> Even if the browser cannot be restarted after the attack has been > >> carried out? The impact of this bug is slightly different from other

Bug#342550: firefox: Javascript, history.dat & DoS

2005-12-09 Thread Florian Weimer
* Mike Hommey: >> Even if the browser cannot be restarted after the attack has been >> carried out? The impact of this bug is slightly different from other >> crash bugs. > > Are you sure the firefox process was not still running ? That would > explain the browser not being able to restart... Ac

Bug#342550: firefox: Javascript, history.dat & DoS

2005-12-08 Thread Mike Hommey
On Thu, Dec 08, 2005 at 10:04:43PM +0100, Florian Weimer <[EMAIL PROTECTED]> wrote: > * Steve Kemp: > > >> My ff does not crashed, but it ate really much cpu-time when I tested > >> slightly modified version of javascript. > > > > Not a security issue, "just" a DOS attack. > > > > Mozilla.o

Bug#342550: firefox: Javascript, history.dat & DoS

2005-12-08 Thread Florian Weimer
* Steve Kemp: >> My ff does not crashed, but it ate really much cpu-time when I tested >> slightly modified version of javascript. > > Not a security issue, "just" a DOS attack. > > Mozilla.org do not regard DOS attacks as security issues, so we cannot > either. Even if the browser cannot

Bug#342550: firefox: Javascript, history.dat & DoS

2005-12-08 Thread Steve Kemp
On Thu, Dec 08, 2005 at 04:48:07PM +0200, Timo Poikola wrote: > Package: firefox > Version: 1.4.99+1.5rc3.dfsg-2 > Severity: grave > Tags: security > Justification: causes non-serious data loss > > http://packetstormsecurity.org/0512-exploits/firefox-1.5-buffer-overflow.txt > > My ff does not cra

Bug#342550: firefox: Javascript, history.dat & DoS

2005-12-08 Thread Timo Poikola
Package: firefox Version: 1.4.99+1.5rc3.dfsg-2 Severity: grave Tags: security Justification: causes non-serious data loss http://packetstormsecurity.org/0512-exploits/firefox-1.5-buffer-overflow.txt My ff does not crashed, but it ate really much cpu-time when I tested slightly modified version o