Description
Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.
References
- 20041018 Web browsers - a mini-farce mailing-list
- 11439 vdb-entry
- RHSA-2005:323 vendor-advisory
- mozilla-html-tags-dos(17805) vdb-entry
- oval:org.mitre.oval:def:10227 vdb-entry signature
- 1011810 vdb-entry
- 20041018 Web browsers - a mini-farce mailing-list
- http://lcamtuf.coredump.cx/mangleme/gallery/