CVE-2009-2408

Mozilla Network Security Services NSS before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to...

VMSA-2008-00010 : Updated Tomcat and Java JRE packages for VMware, ESX 3.5 and VirtualCenter 2.5 (DEPRECATED)

Updated ESX patches and VirtualCenter update 2 fix the following application vulnerabilities. a. Tomcat Server Security Update This release of ESX updates the Tomcat Server package to version 5.5.26, which addresses multiple security issues that existed in earlier releases of Tomcat Server. The...

Mozilla Firefox 3.5 (OSX) - Font Tags Remote Buffer Overflow

Mozilla Firefox 3.5 OSX - Font Tags Remote Buffer Overflow !/usr/bin/env python FireFox 3.5 Heap Spray OS X Exploit Modified by: DrIDE Originally Discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState Thanks to HDM Tested on OS X 10.5.7 from BaseHTTPServer import...

Mozilla Firefox MFSA存在多个安全漏洞

Bugraq ID: 35758 CVE ID：CVE-2009-1194 CVE-2009-2462 CVE-2009-2463 CVE-2009-2464 CVE-2009-2465 CVE-2009-2466 CVE-2009-2467 CVE-2009-2468 CVE-2009-2469 CVE-2009-2471 CVE-2009-2472 CNCVE ID：CNCVE-20091194 CNCVE-20092462 CNCVE-20092463 CNCVE-20092464 CNCVE-20092465 CNCVE-20092466 CNCVE-20092467...

Mozilla Firefox 3.5 Heap Spray OS X

!/usr/bin/env python FireFox 3.5 Heap Spray OS X Exploit Modified by: DrIDE Originally Discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState Thanks to HDM Tested on OS X 10.5.7 from BaseHTTPServer import HTTPServer from BaseHTTPServer import BaseHTTPRequestHandler impo...

Mozilla Foundation Security Advisory 2009-34

Mozilla Foundation Security Advisory 2009-34 Title: Crashes with evidence of memory corruption rv:1.9.1/1.9.0.12 Impact: Critical Announced: July 21, 2009 Reporter: Mozilla developers and community Products: Firefox, Thunderbird Fixed in: Firefox 3.5 Firefox 3.0.12 Description Mozilla developers...

Mozilla Foundation Security Advisory 2009-41

Mozilla Foundation Security Advisory 2009-41 Title: Corrupt JIT state after deep return from native function Impact: Critical Announced: July 16, 2009 Reporter: zbyte Products: Firefox 3.5 Fixed in: Firefox 3.5.1 Description Firefox user zbyte reported a crash that we determined could result in a...

Mozilla Firefox Unicode数据远程拒绝服务漏洞

Bugraq ID: 35707 CVE ID：CVE-2009-2479 CNCVE ID：CNCVE-20092479 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理unicode数据存在问题，远程攻击者可以利用漏洞使应用程序崩溃。 构建恶意WEB页，诱使用户打开可触发此漏洞。 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.9 Mozilla Firefox 3.0...

Mozilla Firefox 3.5 - Font tags Remote HeapSpray (2)

Mozilla Firefox 3.5 - Font tags Remote HeapSpray 2 FireFox 3.5 Heap Spray Discovered by: Simon Berry-Bryne Coded in Perl by netsoul, ALTO PARANA - Paraguay Contact: netsoul2 at gmail dot com !/usr/bin/perl -w use strict; use POE::Component::Server::HTTP; POE::Component::Server::HTTP-newPort = my...

Mozilla Firefox 3.5 (Font tags) Remote Heap Spray Exploit (pl)

Exploit for windows platform in category remote exploits ============================================================== Mozilla Firefox 3.5 Font tags Remote Heap Spray Exploit pl ============================================================== FireFox 3.5 Heap Spray Discovered by: Simon Berry-Bryne...

Mozilla Firefox JavaScript Compiler Code Execution Vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to Remote Code Execution vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxjscompilercodeexecvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox JavaScript Compiler Code Execution Vulnerability Windows Authors:...

Mozilla Firefox 3.5 (Font tags) Remote Heap Spray Exploit

Exploit for windows platform in category remote exploits ========================================================= Mozilla Firefox 3.5 Font tags Remote Heap Spray Exploit ========================================================= !/usr/bin/env python FireFox 3.5 Heap Spray Exploit Originally...

Mozilla Firefox 3.5 - Font tags Remote HeapSpray (1)

Mozilla Firefox 3.5 - Font tags Remote HeapSpray 1 !/usr/bin/env python FireFox 3.5 Heap Spray Exploit Originally discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState from BaseHTTPServer import HTTPServer from BaseHTTPServer import BaseHTTPRequestHandler import sys...

Firefox 3.5 Heap Spray

!/usr/bin/env python FireFox 3.5 Heap Spray Exploit Originally discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState from BaseHTTPServer import HTTPServer from BaseHTTPServer import BaseHTTPRequestHandler import sys class myRequestHandlerBaseHTTPRequestHandler: def...

CVE-2009-2478

Mozilla Firefox 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors, related to a "flash bug."...

CVE-2009-2478

Mozilla Firefox 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors, related to a "flash bug."...

CVE-2009-2478

Mozilla Firefox 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors, related to a "flash bug."...

CVE-2009-2478

CVE-2009-2478 affects Mozilla Firefox 3.5 and can cause a remote denial of service via a NULL pointer dereference related to a “flash bug.” The initial description specifies remote vectors but no concrete exploit details. Connected Fedora/OpenVAS entries confirm the issue is tied to Firefox 3.5 e...

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

Mozilla Firefox 3.5 unicode Remote Buffer Overflow PoC

No description provided by source. ------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- html head script language="JavaScript" type="Text/Javascript" var str = unescape"%u4141%u4141"; var str2 ...