Mozilla Firefox 3远程命令执行漏洞

BUGTRAQ ID: 29794 CVECAN ID: CVE-2008-2786 Firefox是一款流行的开放源码WEB浏览器。 远程攻击者可以利用最新版的Firefox 3处理恶意网页内容时的缓冲区溢出漏洞导致在浏览器会话中执行任意代码。 Mozilla Firefox 3.0 Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/...

CVE-2008-2786

Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes...

CVE-2008-2786

MODE C: Affected Mozilla stack in 2008 (Firefox/Thunderbird/XULRunner/Iceape) with concrete issues: CVEs 2008-2785, 2008-2798, 2008-2799, 2008-2800, 2008-2801, 2008-2802, 2008-2803, 2008-2805, 2008-2807, 2008-2808, 2008-2809, 2008-2811, and 2008-2933. Root causes include missing boundary checks i...