Mozilla Firefox marquee denial of service vulnerability

Date Discovered: 2006. május 30.
Date Published: 2006. május 31.
Last Updated: 2006. május 31.

Threat Assessment
Overall Risk: Low
Impact:        Medium
Popularity:    Medium
Simplicity:    Low

Vulnerability Description
Vulnerability ID:          34192
Discovered By:            n00b
Exploitable Locally:    No
Exploitable Remotely: Yes
Impact:                       Remote attackers can cause a denial of service condition.
Root Cause:                Software Vulnerability

Mozilla Firefox contains a vulnerability that can allow a remote attacker to cause a denial of service condition. The vulnerability is due to how a series of marquee elements are processed. An attacker can create a web page that will cause excessive CPU utilization when viewed until browser execution is terminated.

Recommendations
For: Mozilla Firefox 1.5.0.3
To reduce exposure, do not visit untrusted sites.

Affected Technologies
The Mozilla Organization: Mozilla Firefox 1.5.0.3

More information on CA Vulnerability Information Center:
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34192

Computer Associates – the Trusted Source of Security Knowledge