SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Web Browser)  >   Mozilla Browser Vendors:   Mozilla.org
(Sun Issues Fix for Mozilla Browser) Mozilla Firefox Memory Corruption in Layout Engine and Javascript Engine May Let Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1018209
SecurityTracker URL:  http://securitytracker.com/id/1018209
CVE Reference:   CVE-2006-6498   (Links to External Site)
Updated:  Aug 21 2007
Original Entry Date:  Jun 8 2007
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 1.5 prior to 1.5.0.9, 2.0
Description:   A vulnerability was reported in Mozilla Firefox. A remote user may be able to cause arbitrary code to be executed on the target user's system. Mozilla Browser is affected.

A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a memory corruption error and crash or potentially execute arbitrary code on the target user's system. The code will run with the privileges of the target user.

Andrew Miller, David Baron, Georgi Guninski, Jesse Ruderman, Olli Pettay, and Vladimir Vukicevic reported the vulnerabilities in the layout engine.

Igor Bukanov, Jesse Ruderman and moz_bug_r_a4 reported the vulnerabilities in the JavaScript engine.

Keith Victor reported a vulnerability in js_dtoa().

[Editor's note: The Mozilla Foundation has issued several additional advisories affecting Firefox, Thunderbird, and Seamonkey. Separate Alerts will be issued later today for each Mozilla advisory.]

Impact:   A remote user can create HTML that, when loaded by the target user, may execute arbitrary code on the target user's system.
Solution:   Sun has issued the following fixes for the Mozilla Browser on Sun Solaris.

SPARC Platform

* Mozilla 1.7 (for Solaris 8 and Solaris 9) with patch 120671-06 or later
* Mozilla 1.7 (for Solaris 10) with patch 119115-29 or later

x86 Platform

* Mozilla 1.7 (for Solaris 8 and Solaris 9) with patch 120672-06 or later
* Mozilla 1.7 (for Solaris 10) with patch 119116-29 or later

The Sun advisory is available at:

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102955-1

[Editor's note: The vendor indicates that the Mozilla browser on Solaris is affected by only one of the vulnerabilities listed in CVE-2006-6498, which is Mozilla bug number 361346.]

Vendor URL:  www.mozilla.org/security/announce/2006/mfsa2006-68.html (Links to External Site)
Cause:   Access control error, Boundary error
Underlying OS:  UNIX (Solaris - SunOS)
Underlying OS Comments:  8, 9, 10

Message History:   This archive entry is a follow-up to the message listed below.
Dec 19 2006 Mozilla Firefox Memory Corruption in Layout Engine and Javascript Engine May Let Remote Users Execute Arbitrary Code



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC