Users of ZDI please be advised of a Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
ZDI-10-131: ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution
Mozilla Firefox nsTreeSelection
-- Vulnerability Details:
This vulnerability allows remote attackers to execute arbitrary code on
vulnerable installations of Mozilla Firefox. User interaction is
required to exploit this vulnerability in that the target must visit a
malicious page or open a malicious file.
The specific flaw exists within the implementation of XUL <tree>
element's "selection" attribute. There is an integer overflow when
calculating the bounds of a new selection range. When calling
adjustSelection on this manged range both ranges are deleted leaving a
dangling reference. A remote attacker can exploit this vulnerability to
execute arbitrary code under the context of the browser.
Read more at www.criticalwatch.com
See this Amp at http://bit.ly/c58ohX
No comments:
Post a Comment