PT-2009-4884 · Mozilla · Firefox

Hacker Fantastic · Publicado 2009-07-15 · Atualizado 2017-09-19 · CVE-2009-2477

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.1

Description The issue is related to the Just-in-time (JIT) JavaScript compiler, also known as TraceMonkey, in Mozilla Firefox. It allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations. This can be demonstrated by a document containing specific elements.

Recommendations For versions prior to 3.5.1, update to version 3.5.1 or later to resolve the issue.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-2477

Produtos afetados

Firefox

Referências · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_escape_retval.rb · Exploit
• 🔥 https://exploit-db.com/exploits/9214 · Exploit
• 🔥 https://exploit-db.com/exploits/9137 · Exploit
• 🔥 http://exploit-db.com/exploits/9181 · Exploit
• 🔥 https://exploit-db.com/exploits/16299 · Exploit
• 🔥 http://securityfocus.com/bid/35660 · Exploit
• 🔥 https://exploit-db.com/exploits/40936 · Exploit
• 🔥 http://exploit-db.com/exploits/9137 · Exploit
• http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35 · Nota
• https://redhat.com/archives/fedora-package-announce/2009-July/msg00909.html · Aviso do Fabricante
• https://bugzilla.mozilla.org/show_bug.cgi?id=503286 · Nota
• http://kb.cert.org/vuls/id/443060 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 · Aviso do Fabricante
• http://isc.sans.org/diary.html?storyid=6796 · Nota
• http://secunia.com/advisories/35798 · Aviso do Fabricante