Amusing bug
Results 1 to 5 of 5

Thread: Amusing bug

  1. #1
    Banned
    Join Date
    Jun 2002
    Posts
    70

    Amusing bug

    Don't know if anybody posted this before, but I liked this story.

    X-windows, with or without the font server (XFS) running can be crashed remotely via Mozilla when fonts are set to an unnaturally large size with CSS (Cascading Style Sheets), Tom Vogt of Lemuira.org has reported.

    An X bug allows all available memory to be consumed, which causes the system to freeze. The behavior can be duplicated with applications like the Gimp, we're told, but these aren't remotely exploitable. But with Mozilla, a pest can easily set up a malicious Web site which will crash unsuspecting Tuxers' boxen and cause any unsaved data in open apps to go away.

  2. #2
    Senior Member
    Join Date
    May 2002
    Posts
    236
    Now this is very usefull ko123
    what took you so long ?

  3. #3
    Senior Member
    Join Date
    Apr 2002
    Posts
    712

    Re: Amusing bug

    Originally posted here by ko123
    Don't know if anybody posted this before, but I liked this story.

    X-windows, with or without the font server (XFS) running can be crashed remotely via Mozilla when fonts are set to an unnaturally large size with CSS (Cascading Style Sheets), Tom Vogt of Lemuira.org has reported.
    Which X Server? Where's the pointer/reference?


    Hmmm... ok, just say Google...

    http://www.theregister.co.uk/content/55/25689.html

    And Mozilla has a bug on it here (Mozilla Bug # 150339) Looks like it's caused by Mozilla, but X doesn't handle the exception gracefully.


    <edit>
    The original Lemuria announcement is at:
    http://web.lemuria.org/security/mozilla-dos.html

    And a page to exercise the bug is at:
    http://www.adeliesolutions.com/Projects/

    (Yes, Winblowz would seem to work - go figure)
    </edit>
    \"Windows has detected that a gnat has farted in the general vicinity. You must reboot for changes to take affect. Reboot now?\"

  4. #4
    Senior Member
    Join Date
    Jan 2002
    Posts
    657
    if ur gonna make a post like this itd help to post links where we can read about it or other related topic links (just a suggestion)

    aka site ur sources better
    [shadow]i have a herd of 1337 sheep[/shadow]
    Worth should be judged on quality... Not apperance... Anyone can sell you **** inside a pretty box.. The only real gift then is the box..

  5. #5
    str34m3r
    Guest
    It was also recently discussed on the bugtraq mailing list from securityfocus.

    There was some argument over whether the fault lies in XFS or in mozilla itself.

    http://online.securityfocus.com/arch...9/2002-06-15/0

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •