Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory consumption and browser hang) via a long CLASS attribute in an HR element in an HTML document.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libxul | Mozilla | * | * |
| Xulrunner | Ubuntu | gutsy | * |
| Xulrunner | Ubuntu | hardy | * |
| Xulrunner | Ubuntu | intrepid | * |
| Xulrunner | Ubuntu | jaunty | * |
| Xulrunner | Ubuntu | karmic | * |
| Xulrunner-1.9 | Ubuntu | gutsy | * |
| Xulrunner-1.9 | Ubuntu | hardy | * |
| Xulrunner-1.9 | Ubuntu | intrepid | * |
| Xulrunner-1.9 | Ubuntu | jaunty | * |
References
- http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html
- http://www.packetstormsecurity.org/0812-exploits/mzff_libxul_ml.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47758
- http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html
- http://www.packetstormsecurity.org/0812-exploits/mzff_libxul_ml.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47758