|
Firefox IDN URL Domain Name Buffer Overflow |
|
Tuesday, 13 September 2005
by Michel Roth
|
|
Tom Ferris has discovered a vulnerability in Firefox, which can be exploited by malicious people to cause a DoS (Denial of Service) or to compromise a user's system. The vulnerability is caused due to an error in the handling of an IDN URLs that contains the 0xAD character in its domain name. This can be exploited to cause a heap-based buffer overflow. Successful exploitation crashes Firefox and may allow code execution but requires that the user is tricked into visiting a malicious web site or open a specially crafted HTML file.
Read the advisory here.
|
