16
febrero
2008

FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak

[Advisories] 
Opera and FireFox contains vulnerable code for handling BMP files with partial palette. The code allows to craft a BMP file that leaks information from the heap. This information can be sent to remote server using canvas tag (HTML 5) and javascript.


See the demonstration video at:
http://blog.hispasec.com/lab/files/ff_2_0_0_11.avi (5.7mb, AVI, DivX 6.6.1)

Read more at:
/advisories/adv_Opera_and_Firefox_Remote_Memory_Information_Leak.txt

Sent by Gynvael Coldwind @ 17:06 | Permalink | Comments (1) | Trackbacks (0)
Comentarios
Re: FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak

can a hacker get only Screenshot, or text data?

Posted by: Vovan at febrero 22,2008 02:12
Trackbacks
Please send trackbacks to: http://blog.hispasec.nospam/lab/236/tbZ3ping
Replace "nospam" with "com"
There are no trackbacks.
Post a comment