[CVE-2005-1790] DoS against Mozilla-based browsers

[Debian Bug Importer]

Automatically imported from Debian bug report #340282 http://bugs.debian.org/340282

[Debian Bug Importer (debzilla)]

Automatically imported from Debian bug report #340282 http://bugs.debian.org/340282

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Tue, 22 Nov 2005 12:33:19 +0100
From: Florian Weimer <email address hidden>
To: <email address hidden>
Subject: [CVE-2005-1790] DoS against Mozilla-based browsers

Package: mozilla-browser
Version: 1.7.12-1
Severity: grave
Tags: security

An exploit for CVE-2005-1790, a bug originally classified as IE-only,
causes Mozilla-based browsers to crash. See the proof of concept
exploit (for IE) at:

  <http://www.computerterrorism.com/research/ie/ct21-11-2005>

The CVE name is provisional, maybe another one will be assigned.

[Alexander Sack (asac)]

retitle 340282 [CVE-2005-3896] DoS via BODY onload
thanks

looks like this ended up in CVE-2005-3896.

 - Alexander

--
 GPG messages preferred. | .''`. ** Debian GNU/Linux **
 Alexander Sack | : :' : The universal
 <email address hidden> | `. `' Operating System
 http://www.asoftsite.org | `- http://www.debian.org

[Alex Vaughn (aevaughn)]

similar to bug#26039, except 26039 is for firefox.

[towsonu2003 (towsonu2003)]

hangs browser

[towsonu2003 (towsonu2003)]

browser: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060914 Firefox/1.5.0.7

if 1.5.0.7 hangs, dapper's and older should hang as well.

[Mike Hommey (mh-glandium)]

On Tue, Nov 22, 2005 at 12:33:19PM +0100, Florian Weimer <email address hidden> wrote:
> Package: mozilla-browser
> Version: 1.7.12-1
> Severity: grave
> Tags: security
>
> An exploit for CVE-2005-1790, a bug originally classified as IE-only,
> causes Mozilla-based browsers to crash. See the proof of concept
> exploit (for IE) at:
>
> <http://www.computerterrorism.com/research/ie/ct21-11-2005>
>
> The CVE name is provisional, maybe another one will be assigned.

As far as I can see, this doesn't do anything on mozilla 1.8 branch based
software such as iceweasel or iceape, which provides mozilla-browser,
now.

Please reopen if you think iceape is still affected, as well as evidence
about it ;)

Mike

[Marco Rodrigues (gothicx)]

Still an issue on Dapper!

[Alexander Sack (asac)]

is there a mozilla bug for this issue?

[Alexander Sack (asac)]

ok according to debian bug its fixed in 1.7 branch ... so we don't have this issue in feisty/gutsy ... dapper and edgy might be affected ... however its "just" a DoS ... which unless there is evidence of memory corruption is usually not classified as a security issue for mozillas.

[Alexander Sack (asac)]

setting for those distributions that still have 1.7 branch to Won't Fix.