Lucene search

K
nessusTenable4591.PRM
HistoryAug 18, 2004 - 12:00 a.m.

Mozilla Firefox 3.x < 3.0.1 Multiple Vulnerabilities

2004-08-1800:00:00
Tenable
www.tenable.com
16

Versions of Firefox 3.x prior to 3.0.1 are affected by various security issues :

  • By creating a very large number of references to a common CSS object, an attacker can overflow the CSS reference counter, causing a crash when the browser attempts to free the CSS object while still in use and allowing for arbitrary code execution (MFSA 2008-34).
  • If Firefox is not already running, passing it a command-line URI with pipe (β€˜|’) symbols will open multiple tabs, which could be used to launch β€˜chrome:i’ URIs from the command-line or to pass URIs to Firefox that would normally be handled by a vector application (MFSA 2008-35).
Binary data 4591.prm
VendorProductVersionCPE
mozillafirefoxcpe:/a:mozilla:firefox