Open Bug 832913 Opened 12 years ago Updated 11 months ago

DoS using unknown content-type objects

Categories

(Firefox :: File Handling, defect, P3)

Product:
Firefox
Component:
File Handling
Type:
defect

Tracking

()

People

(Reporter: ojab, Unassigned)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

(Keywords: csectype-dos, sec-low)

Attachments

(3 files)

File with unknown content type ("application/xyz")
(deleted), application/octet-stream
Details
Testcase
(deleted), text/html
Details
download-subdialog.png
(deleted), image/png
Details 
1. Open a page that has 1k objects with unknown content-type
2. Got 1k download windows.

This is clearly DoS, which is happens on several sites, for example, if Flash plugin isn't installed.
See also Bug 376599.
Depends on: 113941

    
    

    
  

      
      
      
      

        Attached file
          
        Testcase (deleted)
        — 
      

    


  
Testcase has many "<iframe src="https://bugzilla.mozilla.org/attachment.cgi?id=704494"></iframe>" lines, so you'll have many download windows.

    
  

        Attachment #704495 -
        Attachment mime type: text/plain → text/html

    
  
Component: Plug-ins → File Handling
Keywords: csec-dos, 
          
            sec-low
Status: UNCONFIRMED → NEW
Ever confirmed: true

    
  
Product: Core → Firefox
Version: Trunk → unspecified

    
    

    
  

      
      
      
      

        Attached image
          
        download-subdialog.png (deleted)
        — 
      

    


  
For cases where we have tab relationship we could show this dialog in the TabDialogBox.



    
    

    
  
In the process of migrating remaining bugs to the new severity system, the severity for this bug cannot be automatically determined. Please retriage this bug using the new severity system.


Severity: major → --

    
    

    
  
The severity field is not set for this bug.

:Gijs, could you have a look please?


For more information, please visit BugBot documentation.


Flags: needinfo?(gijskruitbosch+bugs)

    
    

    
  
We no longer show this dialog by default, but this isn't going to be fully fixed until we address bug 1711049.


Severity: -- → S3
Flags: needinfo?(gijskruitbosch+bugs)
Priority: -- → P3

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: