openSUSE Security Update : MozillaFirefox (MozillaFirefox-2807)

This update brings Mozilla Firefox to the 3.6.8 security release. It fixes following security bugs: MFSA 2010-34 / CVE-2010-1211 / CVE-2010-1212: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of thes...

Mozilla Firefox - Interleaving 'document.write' / 'appendChild' (Metasploit)

$Id: mozillainterleavedwrite.rb 11796 2011-02-22 20:49:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mozilla Firefox Interleaved document.write/appendChild Memory Corruption

This module exploits a code execution vulnerability in Mozilla Firefox caused by interleaved calls to document.write and appendChild. This module was written based on a live exploit found in the wild. This module requires Metasploit: https://metasploit.com/download Current source:...

Mozilla Firefox 3.6.8 - dwmapi.dll DLL Hijacking

Mozilla Firefox 3.6.8 - dwmapi.dll DLL Hijacking / Exploit Title: Firefox define DllExport declspec dllexport DllExport void CPAcquireContext pwn; DllExport void DWMAPI100 pwn; DllExport void DWMAPI101 pwn; DllExport void DwmEnableComposition pwn; DllExport void DWMAPI103 pwn; DllExport void...

Firefox 3.6.7 Remote Code Execution

The installed version of Firefox is 3.6.7. This version is potentially affected by a memory corruption vulnerability that could lead to arbitrary code execution. MFSA 2010-48 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47829; scriptversion"1.11";...

Mozilla Foundation Security Advisory 2010-48

Mozilla Foundation Security Advisory 2010-48 Title: Dangling pointer crash regression from plugin parameter array fix Impact: Critical Announced: July 20, 2010 Reporter: Daniel Holbert Products: Firefox 3.6.7 Fixed in: Firefox 3.6.8 Description Mozilla developer Daniel Holbert reported that the f...