Opera, chrome, Firefox, edge browsers DeadSystemException deeplinks and share links Crash DoS

Monday, November 14, 2022

 Waiting for disclosing details


https://bugs.chromium.org/p/chromium/issues/detail?id=1385502

https://github.com/mozilla-mobile/focus-android/issues/8056

Related vuln :

http://lostmon.blogspot.com/2022/10/mozilla-firefox-focus-and-nightly.html

Mozilla firefox focus and Nightly for Android remote crash DoS

Wednesday, October 12, 2022

########################

Mozilla Firefox, Focus and Nightly

For Android Remote Crash Dos 

Vulnerability.

Last update: 25/11/2022

########################


################

Description 

################

A vulnerability is present in the way that Mozilla  for Android mobile products manage the clipboard and handle excepcions. 

A evil site can take profit from software excepcions to do a crash in the app or to deny access to clipboard and cause a crash resulting in lost of available information that not save. 

If we close the app and clear cache etc, we have the same situation a crash or a Dos that Tdo a crash. :)

The vulnerability interact with parts of Android system like open links in app, and sharing functions. 

It's a of different error messages that the app can't handle or programmer store remote data in parcels, or how store data in clipboard and how process it. 

Multiple app are vulnerable to this style attack resulting in a lost of data, DoS to application, crash aplicattion or DoS to functions or application or dead browser treat activity and force user to close App. 

We can abuse parcels errors in

TransactionTooLargeException

DeadSystemException

Wen can abuse open in app or sharing functions or clipboard functions in


TransactionTooLargeException

DeadSystemException

ClipboardManager

content.ClipboardManager.getPrimaryClip


################

Versions afected:

################

Mozilla firefox 

107.1.0 Build #2015915067

106.1.0 built 2015907747

105.2.0 built 2015907747


Mozilla Nightly 

107.0a1 

built 2015909163 

built 2015909131

built 2015915115

108.0a1 

built 2015912339 

built 2015913675

109.0a1 

Build 2015916075

Build 2015917035

Build 2015917803


Mozilla Focus 

105.0.2 

built  362762015

107.1.0

Built 363142253

#########################

Related bugs in other apps

https://bugs.chromium.org/p/chromium/issues/detail?id=1385502


Mozilla issue tracker 

https://github.com/mozilla-mobile/focus-android/issues/8056

Posible related bug

https://github.com/mozilla-mobile/android-components/issues/12804

Tested on

Android 9, 10, 11, 12 and continue testing


################

Timelime

################

Discovered 28-08-2022

Vendor notify NO

Released 12-10-2022

Last update 25-11-2022

###############

No more details at this time. 

Exploit available in private. 

I update this advisore in few days with more information. 


################ €nd ####################

--
atentamente:
Lostmon (lostmon@gmail.com)
Web-Blog: http://lostmon.blogspot.com/
Google group: http://groups.google.com/group/lostmon (new)
--
La curiosidad es lo que hace mover la mente.... 

 

Browse

About:Me

My blog:http://lostmon.blogspot.com
Mail:Lostmon@gmail.com
Lostmon Google group
Lostmon@googlegroups.com

La curiosidad es lo que hace
mover la mente...