PT-2008-5574 · Mozilla · Firefox

Aditya K Sood · Publicado 2008-09-29 · Atualizado 2018-10-11 · CVE-2008-4324

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 3.0.2 through 3.0.3

Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events.

Recommendations: For Mozilla Firefox versions 3.0.2 through 3.0.3, consider disabling the user interface event dispatcher as a temporary workaround until a patch is available. Restrict access to the affected event handlers to minimize the risk of exploitation. Avoid triggering the series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events in the affected versions.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-4324

Produtos afetados

Firefox

Referências · 10

• 🔥 https://exploit-db.com/exploits/6614 · Exploit
• 🔥 http://securityfocus.com/bid/31476 · Exploit
• 🔥 http://securityreason.com/securityalert/4321 · Exploit
• 🔥 http://secniche.org/moz303/index.html · Exploit
• http://securityfocus.com/archive/1/496846/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4324 · Nota de Segurança
• http://securityfocus.com/archive/1/496807/100/0/threaded · Nota
• http://secunia.com/advisories/32040 · Aviso do Fabricante
• http://evilfingers.com/advisory/Firefox_User_Interface_Null_Pointer_Dereference_Dispatcher_Crash_n_Remote_DoS.php · Nota
• http://secniche.org/moz303.html · Nota