Mozilla Firefox, Thunderbird and Suite DoS Exploits

Web	TechJunkeez.com

Mozilla Firefox, Thunderbird and Suite DoS Exploits

By Mohammad Yousef | October 19, 2005

Milw0rm.com has recently posted two pieces of exploit code for the main three Mozilla products: Firefox, Thunderbird and the Mozilla Suite.

The first exploit, affecting Mozilla Firefox (versions 1.0.7 and below) and Mozilla Thunderbird (versions 1.0.6 and below), causes the program to stop responding and can be demonstrated by this line of HTML:

<html><body><strong>Mozilla<sourcetext></body></html>

The second exploit causes the program to crash and apparently, Firefox (versions 1.0.7 and below) and the Mozilla Suite (versions 1.7.12 and below) are affected by this exploit:

<html>
<script language="JavaScript">
document.write('<link rel="stylesheet" href="http://">');
</script>
</html>

According to user reports, Mozilla Firefox 1.5 Beta 2 is not affected by any of the two exploits. The latest versions of Internet Explorer 6 and the Opera Browser do not seem no be affected either.

A workaround or patch is expected shortly.

Disclaimer:

1) Tech Junkeez cannot be held responsible for the contents of external sites.

2) Information in any of our articles might have changed since the time of writing it.

writer's name are included with the copied material.