Wednesday, September 15, 2010

Mozilla Firefox: tree Object Removal Remote Code Execution Vulnerability

Users of Mozilla Firefox please be advised of a tree Object Removal Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

ZDI-10-172: ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability

-- Affected Products:

Mozilla Firefox 3.6.x


-- Vulnerability Details:

This vulnerability allows remote attackers to execute arbitrary code on

vulnerable installations of Mozilla Firefox. User interaction is

required to exploit this vulnerability in that the target must visit a

malicious page or open a malicious file.


Read more at www.criticalwatch.com
 

No comments:

Post a Comment