Wednesday, September 15, 2010

Mozilla Firefox: nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability

Users of Mozilla Firefox please be advised of a nsTreeContentView Dangling Pointer Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

ZDI-10-171: ZDI-10-171: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability

-- Affected Products:

Mozilla Firefox 3.6.x
-- Vulnerability Details:

This vulnerability allows remote attackers to execute arbitrary code on

vulnerable installations of Mozilla Firefox. User interaction is

required to exploit this vulnerability in that the target must visit a

malicious page or open a malicious file.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment