Comment 75 for bug 374524

Revision history for this message
PowerUser (i-am-sergey) wrote :

Binary package hint: firefox

Firefox could be crashed by a remotely-triggered DoS condition causing very unpleasant user experience.

Prerequisuites:
 Firefox 3.0 running under some X Window system. At least x86 and AMD64 Ubuntus are affected.

To reproduce:
 Either load URL like http://lady.mail.ru/img/bg_l.png or open attached file in Firefox

Result:
 Firefox immediately terminated. This allows people to play a bad joke against non-windows OS users causing DoS condition by attempt to load a bad PNG file.

Output:
The program 'firefox' received an X Window System error.
This probably reflects a bug in the program.
The error was 'BadAlloc (insufficient resources for operation)'.
  (Details: serial 345764 error_code 11 request_code 53 minor_code 0)
  (Note to programmers: normally, X errors are reported asynchronously;
   that is, you will receive the error a while after causing it.
   To debug your program, run it with the --sync command line
   option to change this behavior. You can then get a meaningful
   backtrace from your debugger if you break on the gdk_x_error() function.)

Notes:
 Upstream haves a bug, see https://bugzilla.mozilla.org/show_bug.cgi?id=210931 and encourage them to fix this bug ASAP.