[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20140304123322.GD5757@debjann.fritz.box>
Date: Tue, 4 Mar 2014 13:33:22 +0100
From: Jann Horn <jann@...jh.net>
To: oss-security@...ts.openwall.com
Subject: Re: CVE Request?: konqueror - https uses all ciphers,
even weak ones
On Tue, Mar 04, 2014 at 12:28:21PM +0000, John Haxby wrote:
>
> On 4 Mar 2014, at 11:24, Daniel Kahn Gillmor <dkg@...thhorseman.net> wrote:
>
> >> Google Chrome doesn’t permit the link though, it just crashes :)
> >
> > On what platform? Is this for any connection, or just for a primary
> > connection? That is, can any web site can crash google chrome with <img
> > src="https://demo.cmrg.net/" /> ?
> >
> > (sorry, i don't have either chrome or safari handy to test it myself
> > right now)
>
> Chrome crashes on both Linux and Mavericks.
Could this be https://code.google.com/p/chromium/issues/detail?id=91341 or so?
Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
