gfxgfx
 
Please login or register.

Login with username, password and session length
 
gfx gfx
gfx
76620 Posts in 13450 Topics by 2079 Members - Latest Member: Texasstarpride June 16, 2021, 08:54:26 am
*
gfx*gfx
gfx
WinMX World :: Forum  |  Discussion  |  WinMx World News  |  Memory-hogging bug offers universal browser crash exploit
gfx
gfxgfx
 

Author Topic: Memory-hogging bug offers universal browser crash exploit  (Read 463 times)

0 Members and 1 Guest are viewing this topic.

Offline DaBees-Knees

  • WMW Team
  • *****
Memory-hogging bug offers universal browser crash exploit
« on: July 19, 2009, 04:09:27 pm »
http://www.theregister.co.uk/2009/07/17/universal_browser_crash_bug/

Quote
Security researchers have published details of a security flaw that can crash multiple browsers across multiple platforms.

There are many more flaws out there that are more serious, but the security shortcomings in JavaScript's DOM (Document Object Model) are nonetheless noteworthy because the issue affects Firefox, Safari, Opera, Chrome and Internet Explorer to a lesser or greater extent. Even smartphones, such as the iPhone and Nokia N95, as well at the Sony PS3 might be forced to crash using the approach, obliging users to reset devices.

The flaw works by tricking a browser into allocating huge chunks of memory, behaviour likely to result in a crash.

Using JavaScript's DOM (Document Object Model) to create a selection menu on a web page with a very high value sets up the trick. H Security explains that the coding trickery results in a huge allocation of memory.

This isn't in itself a problem if the memory area is defined as read only, but problems arise in the many cases where browsers fail to stop overwrites, leading to two processes trying to get at the same portion of memory at the same time and therefore provoking browser crashes.

The flaw presents a browser crash rather than malware injection risk in all cases. Crashing is most easily achieved on IE, with all versions of Microsoft's browser affected. Versions of Ubuntu running Konquerer might be forced to reboot if exposed to attacks based on the bug because of a memory management failure issue.

By contrast Opera, Chrome and Firefox have all been patched to defend against the flaw - so only older versions of those browsers are affected.

Another heads up for you.  8)

Offline Cobra

  • Forum Member
  • I'm not me.
Re: Memory-hogging bug offers universal browser crash exploit
« Reply #1 on: July 20, 2009, 05:07:10 am »
I am pretty sure that I have experienced this once or twice over the years on an older browser.
Downloading is an addiction I do not want to give up.

WinMX World :: Forum  |  Discussion  |  WinMx World News  |  Memory-hogging bug offers universal browser crash exploit
 

gfxgfx
gfx
©2005-2021 WinMXWorld.com. All Rights Reserved.
SMF 2.0.18 | SMF © 2021, Simple Machines | Terms and Policies
Page created in 0.024 seconds with 22 queries.
Helios Multi © Bloc
gfx
Powered by MySQL Powered by PHP Valid XHTML 1.0! Valid CSS!