<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Firefox Denial of Service (Keygen)</title>
	<atom:link href="http://sechero.com/firefox-denial-of-service-keygen/feed/" rel="self" type="application/rss+xml" />
	<link>http://sechero.com/firefox-denial-of-service-keygen/</link>
	<description>If it's about security, you heard it here first</description>
	<lastBuildDate>Sat, 30 May 2009 10:40:51 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>By: "Bugtraq: Tavis Ormandy" </title>
		<link>http://sechero.com/firefox-denial-of-service-keygen/comment-page-1/#comment-314</link>
		<dc:creator>"Bugtraq: Tavis Ormandy" </dc:creator>
		<pubDate>Thu, 28 May 2009 16:50:01 +0000</pubDate>
		<guid isPermaLink="false">#comment-314</guid>
		<description>&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;h1&gt;&lt;a href=&quot;http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=86369&quot;&gt;Re: [TZO-27-2009] Firefox Denial of Service (Keygen)&lt;/a&gt;&lt;/h1&gt;&lt;/p&gt;
&lt;p&gt;&lt;!-- Envelope-to: email@address Delivery-date: Thu, 28 May 2009 17:45:56 +0100 Received: from outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by lt.network5.net with esmtp (Exim 4.43) 	id 1M9ijs-0002xi-Lr 	for email@address; Thu, 28 May 2009 17:45:56 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) 	by outgoing2.securityfocus.com (Postfix) with QMQP 	id 2839C143753; Thu, 28 May 2009 09:23:41 -0600 (MDT) Mailing-List: contact bugtraq-help@securityfocus.com; run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list bugtraq@securityfocus.com Delivered-To: moderator for bugtraq@securityfocus.com Received: (qmail 9850 invoked from network); 28 May 2009 11:05:06 -0000 X-Injected-Via-Gmane: http://gmane.org/ Lines: 25 Message-ID: &lt;gemini.kkcp9k09cyp8w031t.taviso@sdf.lonestar.org&gt; References: &lt;1251971057.20090528031438@Zoller.lu&gt; Content-Type: text/plain; charset=us-ascii X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 74.125.57.33 User-Agent: Gemini/2.29i (Qt/3.3.6) (Linux-i686) Sender: news &lt;news@ger.gmane.org&gt; Cc: full-disclosure@lists.grok.org.uk X-IMAPbase: 1176125385 9220 Status: O X-UID: 9220 Content-Length: 1098 X-Keywords:                                                                                                    &lt;/p&gt;
&lt;p&gt;
</description>
		<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&#038;l=bugtraq&#038;m=86369">Re: [TZO-27-2009] Firefox Denial of Service (Keygen)</a></h1>
</p>
<p><!-- Envelope-to: email@address Delivery-date: Thu, 28 May 2009 17:45:56 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M9ijs-0002xi-Lr 	for email@address; Thu, 28 May 2009 17:45:56 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing2.securityfocus.com" title="http://outgoing2.securityfocus.com" target="_blank">outgoing2.securityfocus.com</a> (Postfix) with QMQP 	id 2839C143753; Thu, 28 May 2009 09:23:41 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com">bugtraq-help@securityfocus.com</a>; run by ezmlm Precedence: bulk List-Id: &amp;lt;bugtraq.list-id.securityfocus.com&amp;gt; List-Post: &amp;lt;mailto:bugtraq@securityfocus.com&amp;gt; List-Help: &amp;lt;mailto:bugtraq-help@securityfocus.com&amp;gt; List-Unsubscribe: &amp;lt;mailto:bugtraq-unsubscribe@securityfocus.com&amp;gt; List-Subscribe: &amp;lt;mailto:bugtraq-subscribe@securityfocus.com&amp;gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 9850 invoked from network); 28 May 2009 11:05:06 -0000 X-Injected-Via-Gmane: <a href="http://gmane.org/" rel="nofollow">http://gmane.org/</a> Lines: 25 Message-ID: &amp;lt;gemini.kkcp9k09cyp8w031t.taviso@sdf.lonestar.org&amp;gt; References: &amp;lt;1251971057.20090528031438@Zoller.lu&amp;gt; Content-Type: text/plain; charset=us-ascii X-Complaints-To: <a href="mailto:usenet@ger.gmane.org">usenet@ger.gmane.org</a> X-Gmane-NNTP-Posting-Host: 74.125.57.33 User-Agent: Gemini/2.29i (Qt/3.3.6) (Linux-i686) Sender: news &amp;lt;news@ger.gmane.org&amp;gt; Cc: <a href="mailto:full-disclosure@lists.grok.org.uk">full-disclosure@lists.grok.org.uk</a> X-IMAPbase: 1176125385 9220 Status: O X-UID: 9220 Content-Length: 1098 X-Keywords:                                                                                                    </p></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: "Full Disclosure (fulldisclosure) Mailing List" </title>
		<link>http://sechero.com/firefox-denial-of-service-keygen/comment-page-1/#comment-313</link>
		<dc:creator>"Full Disclosure (fulldisclosure) Mailing List" </dc:creator>
		<pubDate>Thu, 28 May 2009 11:01:07 +0000</pubDate>
		<guid isPermaLink="false">#comment-313</guid>
		<description>&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;h1&gt;&lt;a href=&quot;http://seclists.org/fulldisclosure/2009/May/0256.html&quot;&gt;Re:  [TZO-27-2009] Firefox Denial of Service (Keygen)&lt;/a&gt;&lt;/h1&gt;&lt;/p&gt;
&lt;p&gt;Posted by Tavis Ormandy on May 28&lt;p&gt;&lt;/p&gt;
&lt;p&gt; &lt;p&gt; Thierry Zoller &lt;Thierry_at_Zoller&#046;lu&gt; wrote: &lt;br /&gt; &gt; According to a Bugzilla entry memory is also leaked during the process. &lt;br /&gt; &gt;  &lt;br /&gt; &gt; So let&#039;s recap, we have a function that generates key material and looping &lt;br /&gt; &gt; causes memory to leak. One might think this should be important enough...&lt;p&gt;URL: &lt;a href=&quot;http://seclists.org/fulldisclosure/2009/May/0256.html&quot;&gt;http://seclists.org/fulldisclosure/2009/May/0256.html&lt;/a&gt;&lt;/p&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;

</description>
		<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://seclists.org/fulldisclosure/2009/May/0256.html">Re:  [TZO-27-2009] Firefox Denial of Service (Keygen)</a></h1>
</p>
<p>Posted by Tavis Ormandy on May 28</p>
</p>
<p> Thierry Zoller &lt;Thierry_at_Zoller&#46;lu&gt; wrote: <br /> &gt; According to a Bugzilla entry memory is also leaked during the process. <br /> &gt;  <br /> &gt; So let&#8217;s recap, we have a function that generates key material and looping <br /> &gt; causes memory to leak. One might think this should be important enough&#8230;</p>
<p>URL: <a href="http://seclists.org/fulldisclosure/2009/May/0256.html">http://seclists.org/fulldisclosure/2009/May/0256.html</a></p></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: "Full Disclosure (fulldisclosure) Mailing List" </title>
		<link>http://sechero.com/firefox-denial-of-service-keygen/comment-page-1/#comment-312</link>
		<dc:creator>"Full Disclosure (fulldisclosure) Mailing List" </dc:creator>
		<pubDate>Thu, 28 May 2009 02:45:32 +0000</pubDate>
		<guid isPermaLink="false">#comment-312</guid>
		<description>&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;h1&gt;&lt;a href=&quot;http://seclists.org/fulldisclosure/2009/May/0248.html&quot;&gt;Re:  [TZO-27-2009] Firefox Denial of Service (Keygen)&lt;/a&gt;&lt;/h1&gt;&lt;/p&gt;
&lt;p&gt;Posted by Pete Licoln on May 27&lt;p&gt;&lt;/p&gt;
&lt;p&gt; &lt;p&gt; Looks like some doctors have made some in vitro fertilization fuzzing with &lt;br /&gt; jeremy a while ago ... &lt;br /&gt; &lt;p&gt;2009/5/27 Jeremy Brown &lt;0xjbrown41_at_gmail&#046;com&gt; &lt;br /&gt; &lt;p&gt;&gt; Looks like somebody&#039;s been using a browser fuzzer :) &lt;br /&gt; &gt; &lt;br /&gt; &gt; On Wed, May 27, 2009 at 9:14 PM, Thierry Zoller...&lt;p&gt;URL: &lt;a href=&quot;http://seclists.org/fulldisclosure/2009/May/0248.html&quot;&gt;http://seclists.org/fulldisclosure/2009/May/0248.html&lt;/a&gt;&lt;/p&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;

</description>
		<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://seclists.org/fulldisclosure/2009/May/0248.html">Re:  [TZO-27-2009] Firefox Denial of Service (Keygen)</a></h1>
</p>
<p>Posted by Pete Licoln on May 27</p>
</p>
<p> Looks like some doctors have made some in vitro fertilization fuzzing with <br /> jeremy a while ago &#8230;  </p>
<p>2009/5/27 Jeremy Brown &lt;0xjbrown41_at_gmail&#46;com&gt;  </p>
<p>&gt; Looks like somebody&#8217;s been using a browser fuzzer <img src='http://sechero.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  <br /> &gt; <br /> &gt; On Wed, May 27, 2009 at 9:14 PM, Thierry Zoller&#8230;</p>
<p>URL: <a href="http://seclists.org/fulldisclosure/2009/May/0248.html">http://seclists.org/fulldisclosure/2009/May/0248.html</a></p></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: "Full Disclosure (fulldisclosure) Mailing List" </title>
		<link>http://sechero.com/firefox-denial-of-service-keygen/comment-page-1/#comment-310</link>
		<dc:creator>"Full Disclosure (fulldisclosure) Mailing List" </dc:creator>
		<pubDate>Thu, 28 May 2009 02:20:11 +0000</pubDate>
		<guid isPermaLink="false">#comment-310</guid>
		<description>&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;h1&gt;&lt;a href=&quot;http://seclists.org/fulldisclosure/2009/May/0247.html&quot;&gt;Re:  [TZO-27-2009] Firefox Denial of Service (Keygen)&lt;/a&gt;&lt;/h1&gt;&lt;/p&gt;
&lt;p&gt;Posted by Jeremy Brown on May 27&lt;p&gt;&lt;/p&gt;
&lt;p&gt; &lt;p&gt; Looks like somebody&#039;s been using a browser fuzzer :) &lt;br /&gt; &lt;p&gt;On Wed, May 27, 2009 at 9:14 PM, Thierry Zoller &lt;Thierry_at_zoller&#046;lu&gt; wrote: &lt;br /&gt; &gt; ________________________________________________________________________ &lt;br /&gt; &gt; &lt;br /&gt; &gt;              From the very-low-hanging-fruit-department &lt;br /&gt; &gt;...&lt;p&gt;URL: &lt;a href=&quot;http://seclists.org/fulldisclosure/2009/May/0247.html&quot;&gt;http://seclists.org/fulldisclosure/2009/May/0247.html&lt;/a&gt;&lt;/p&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;

</description>
		<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://seclists.org/fulldisclosure/2009/May/0247.html">Re:  [TZO-27-2009] Firefox Denial of Service (Keygen)</a></h1>
</p>
<p>Posted by Jeremy Brown on May 27</p>
</p>
<p> Looks like somebody&#8217;s been using a browser fuzzer <img src='http://sechero.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />   </p>
<p>On Wed, May 27, 2009 at 9:14 PM, Thierry Zoller &lt;Thierry_at_zoller&#46;lu&gt; wrote: <br /> &gt; ________________________________________________________________________ <br /> &gt; <br /> &gt;              From the very-low-hanging-fruit-department <br /> &gt;&#8230;</p>
<p>URL: <a href="http://seclists.org/fulldisclosure/2009/May/0247.html">http://seclists.org/fulldisclosure/2009/May/0247.html</a></p></p>
]]></content:encoded>
	</item>
</channel>
</rss>

