------=_Part_28576_3527460.1154247075447
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

SYSTEMS AFFECTED:

* All versions of Mozilla Firefox 1.5 up to latest on all operating systems.
Earlier versions of Firefox and other Mozilla browsers currently unconfirmed
* Camino, Opera, MSIE and Konqueror are not affected.

OVERVIEW:
Stacking multiple CSS style attributes across span tags leads to a race
condition
which can result in denial of service or arbitrary code execution.

PROOF OF CONCEPT:

DoS proof of concept is available by Tor hidden service:
http://k5goj46pmx25dxnl.onion/lar.html
Remote code execution exploit is available with Tor hidden service
connectback shell shellcode (custom shellcode available on request) for
Linux and Windows from BanLabs. Cost is approx $4000USD plus transfer fees.
Trades accepted. Email for more info.

------=_Part_28576_3527460.1154247075447
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

SYSTEMS AFFECTED:<br><br>* All versions of Mozilla Firefox 1.5 up to latest on all operating systems. Earlier versions of Firefox and other Mozilla browsers currently unconfirmed<br>* Camino, Opera, MSIE and Konqueror are not affected.
<br><br>OVERVIEW:<br>Stacking multiple CSS style attributes across span tags leads to a race condition<br>which can result in denial of service or arbitrary code execution.<br><br>PROOF OF CONCEPT:<br><br>DoS proof of concept is available by Tor hidden service: 
<a href="http://k5goj46pmx25dxnl.onion/lar.html">http://k5goj46pmx25dxnl.onion/lar.html</a><br>Remote code execution exploit is available with Tor hidden service connectback shell shellcode (custom shellcode available on request) for Linux and Windows from BanLabs. Cost is approx $4000USD plus transfer fees. Trades accepted. Email for more info.
<br>

------=_Part_28576_3527460.1154247075447--