The Ethical Hacker Network - Another FireFox Vuln

Latest Additions

Who's Online

EH-Net > Resources > News from the Outside World (Moderator: don) > Another FireFox Vuln

Pages: [1] Go Down

	Author	Topic: Another FireFox Vuln (Read 3787 times)
0 Members and 1 Guest are viewing this topic.

BillV

Hero Member

Offline

Posts: 1892

Another FireFox Vuln

« on: March 26, 2009, 07:34:23 AM »

Quote

Mozilla Firefox is prone to a remote memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected browser. Failed exploit attempt will result in a denial-of-service condition.

Article: FireFox Fix Due Next Week

Quote

We... consider this a critical issue,

Exploit POC: SecurityFocus


	Logged

Ketchup

Hero Member

Offline

Posts: 1021

Re: Another FireFox Vuln

« Reply #1 on: March 26, 2009, 08:34:23 AM »

Tested it, definitely crashed my Firefox


	Logged

~~~~~~~~~~~~~~
Ketchup

ethicalhack3r

Full Member

Offline

Posts: 139

Re: Another FireFox Vuln

« Reply #2 on: March 29, 2009, 06:18:18 PM »

It has been fixed in 3.0.8.

Release notes:
Arbitrary code execution through XUL <tree> element
XSL Transformation vulnerability

http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.8