On Wed, 31 May 2006, Josh Zlatin-Amishav wrote:
Can you give us some more details, like versions and platforms affected? I was unable to recreate this flaw using firefox 1.5.dfsg+1.5.0 on Debian unstable.
The word-wrapping of his mail client broke the exploit. If you clean that up by only putting line-breaks between tags, it seems to work. Try: http://static.die.net/firefox-marquee-dos/ This breaks Firefox/1.5.0.3 on Ubuntu 5.0.4 and WinXP, and Firefox/1.5.0.2 on Ubuntu 5.1.0. The browser freezes and on Linux the window stops repainting. -- Aaron
