Ready to be published? LXer is read by around 350,000 individuals each month, and is an excellent place for you to publish your ideas, thoughts, reviews, complaints, etc. Do you have something to say to the Linux community?
Already Firefox 1.5, the latest incarnation of the popular alternative browser, has had exploit code released which takes advantage of a bug in the history.dat file, which stores information from Web sites users have visited. Basically, using an overly long topic of a page can cause the browser to crash each time it is started after going to such a page. According to the Internet Storm Center, it is not possible to start Firefox normally until the history.dat file is manually erased.
What with all of the new code in it and full source availability, you'd expect a malcontent to be able to come up with a far more intricate and destructive "exploit" than that. They really can't be trying if this is the nastiest they've achieved.
OTOH having a bug as simple and obvious as this -- effectively a buffer overflow -- hanging around after all of this time and all of this practice at robust coding is a bit startling too.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
What with all of the new code in it and full source availability, you'd expect a malcontent to be able to come up with a far more intricate and destructive "exploit" than that. They really can't be trying if this is the nastiest they've achieved.
OTOH having a bug as simple and obvious as this -- effectively a buffer overflow -- hanging around after all of this time and all of this practice at robust coding is a bit startling too.