The same thing happened to safari when it came out on windows. On Tue, Sep 2, 2008 at 5:13 PM, Larry Seltzer <[EMAIL PROTECTED]>wrote:
> Holy crap, a crash bug in a beta browser! > > Larry Seltzer > eWEEK.com Security Center Editor > http://security.eweek.com/ > http://blogs.pcmag.com/securitywatch/ > Contributing Editor, PC Magazine > [EMAIL PROTECTED] > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Rishi > Narang > Sent: Tuesday, September 02, 2008 7:51 PM > To: [email protected] > Subject: [Full-disclosure] Google Chrome Browser Vulnerability > > Hi, > > --------------------------------------------------- > Software: > Google Chrome Browser 0.2.149.27 > > Tested: > Windows XP Professional SP3 > > Result: > Google Chrome Crashes with All Tabs > > Problem: > An issue exists in how chrome behaves with undefined-handlers in > chrome.dll version 0.2.149.27. A crash can result without user > interaction. When a user is made to visit a malicious link, which has an > undefined handler followed by a 'special' character, the chrome crashes > with a Google Chrome message window "Whoa! Google Chrome has crashed. > Restart now?". It fails in dealing with the POP EBP instruction when > pointed out by the EIP register at 0x01002FF4. > > Proof of Concept: > http://evilfingers.com/advisory/google_chrome_poc.php > > Credit: > Rishi Narang (psy.echo) > www.greyhat.in > www.evilfingers.com > --------------------------------------------------- > > -- > Thanks & Regards, > Rishi Narang | Security Researcher > Founder, GREYHAT Insight > Key: 0x8D67A3A3 (www.greyhat.in/key.asc) > www.greyhat.in > > ... eschew obfuscation, espouse elucidation. > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > -- http://www.goldwatches.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
