EUVD-2009-1045

Malware in sbrugna...

Firefox _moveToEdgeShift方式远程代码执行漏洞

BUGTRAQ ID: 34181 CVECAN ID: CVE-2009-1044 Firefox是一款非常流行的开放源码WEB浏览器。 Firefox中XUL树方式moveToEdgeShift在某些情况下可能会对仍在使用的对象触发垃圾收集例程，之后浏览器在试图访问之前已被释放的对象时会崩溃。攻击者可以利用这种崩溃在用户机器上执行任意指令。 Mozilla Firefox 3.0.8 Debian ------ Debian已经为此发布了一个安全公告（DSA-1756-1）以及相应补丁: DSA-1756-1：New xulrunner packages fix multiple...

CVE-2009-1044

Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009...