Wednesday, September 15, 2010

Mozilla Firefox: nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability

Users of Mozilla Firefox please be advised of a nsTreeSelection Dangling Pointer Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

ZDI-10-173: ZDI-10-173: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability

-- Affected Products:

Mozilla Firefox 3.6.x
-- Vulnerability Details:

This vulnerability allows remote attackers to execute arbitrary code on

vulnerable installations of Mozilla Firefox. User interaction is

required to exploit this vulnerability in that the target must visit a

malicious page or open a malicious file.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment