Latest In Information Security - Security researchers have discovered a DENIAL OF SERVICE (DoS) bug which can crash Mozilla Firefox browsers.
Security researchers have discovered a DENIAL OF SERVICE (DoS) bug which can crash Mozilla Firefox browsers on Windows, Linux, and Mac.The bug was discovered by Sabri Haddouche, a security researcher at Wire and published a proof-of-concept code on GitHub. https://twitter.com/pwnsdx/status/1043918236834770948 The bug will cause Firefox browser on Macs and Linux systems to crash and display Crash Reporter message.In Windows systems at some conditions, the bug not only crashes the browser but also freezes the entire operating system. Users are forced to hard reboot the operating system to resolve the problem. According to ZDNet, the bug generates a file (a blob) which contains an extremely long file name making the user to download it in every millisecond.This floods the Inter-Process Communication channel between browsers child and main process and causing the browser to freeze.The bug worked against the latest Firefox stable versions, Firefox developer and Nightly editions. The bug did not affect Android and iOS users.“During our experiments, the DoS bug worked against the latest Firefox stable release, but also Firefox Developer and Nightly editions. The bug did not crash Firefox for Android instances, according to ZDNet's tests. Firefox uses the WebKit engine on iOS, instead of its new Quantum engine, so iPhone and iPad users aren't affected.”Earlier this week Sabri Haddouche discovered a new CSS attack which crashes iOS devices and freezes MAC devices. The researcher also has a portal named Browser Reaper, where he published his finding on vulnerabilities that affect major browsers like Safari, Chrome and Firefox. For the latest cyber threats and the latest hacking news please follow us on Facebook and Twitter.