[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Mozilla Firefox "Host:" Buffer Overflow Exploit
- To: full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx, security@xxxxxxxxxxx
- Subject: [Full-disclosure] Mozilla Firefox "Host:" Buffer Overflow Exploit
- From: Berend-Jan Wever <berendjanwever@xxxxxxxxx>
- Date: Sat, 10 Sep 2005 03:52:32 -0700
(Just a little heads up, no details or PoC attached)
The security vulnerability in Mozilla FireFox reported by Tom Ferris is
exploitable on Windows.
I developed a working exploit that seems to be 100% stable, though I've only
tested it on one system.
The exploit will not be released publicly untill patches are out.
On a side note: it took only about 3 hours and 30 minutes to develop the
exploit, so I might not be the only one able to write it.
Cheers,
SkyLined
--
Berend-Jan Wever <berendjanwever@xxxxxxxxx>
http://www.edup.tudelft.nl/~bjwever
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/