6 matches found
SUSE CVE-2005-2265
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service access violation and crash, and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string...
Mozilla Suite/Firefox - InstallVersion->compareTo() Code Execution (Metasploit)
$Id: mozillacompareto.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mozilla Firefox 1.04 - 'compareTo()' Remote Code Execution
Mozilla FirefoxcompareTo Remote Code Execution Exploit function BodyOnLoad location.href="javascript:void new InstallVersion;"; CrashAndBurn; ; // The "Heap Spraying" is based on SkyLined InternetExploiter2 methodology function CrashAndBurn // Spray up to this address var...
security flaw
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service access violation and crash, and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string...
security flaw
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service access violation and crash, and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string...
Exploitable crash in InstallVersion.compareTo — Mozilla
When InstallVersion.compareTo is passed an object rather than a string it assumed the object was another InstallVersion without verifying it. When passed a different kind of object the browser would generally crash with an access violation...