← Advisories

Flock Social Web Browser 1.2.5 (loop) Remote Denial of Service Exploit

High
Advisory ID
ZSL-2008-4895
Release Date
06 September 2008
Vendor
Affected Version
1.2.5
CVE
N/A
Tested On
Microsoft Windows XP Professional SP2 (English)
Summary

Flock is a browser. The people here at Flock are committed to building a browser unlike anything you’ve ever experienced before - because we start by focusing on user needs. We take pride in solving for common behaviors on the Web that seem clunky today, and will seem ridiculous tomorrow. We’re taking you there.

Description

Flock is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle unexpected input. Successfully exploiting these issues allows remote attackers to cause the application to freeze, denying service to legitimate users.

Proof of Concept
Disclosure Timeline
N/A
Credits
Vulnerability discovered by Gjoko Krstic
Special thanks to Gianni Amato
References
Changelog
06.09.2008Initial release
09.09.2008Added reference [11]