Mozilla Firefox 'NPObject'访问远程代码执行漏洞

Bugraq ID: 35360 CVE ID：CVE-2009-1837 CNCVE ID：CNCVE-20091837 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox访问NPObject JS封装类对象的私有数据时存在竞争条件错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当访问NPObject属性一个封装的JSObject时NPObjWrapperNewResolve存在竞争条件错误，在装载Java...

Mozilla Foundation Security Advisory 2009-28

Mozilla Foundation Security Advisory 2009-28 Title: Race condition while accessing the private data of a NPObject JS wrapper class object Impact: Critical Announced: June 11, 2009 Reporter: Jakob Balle, Carsten Eiram Products: Firefox 3 Fixed in: Firefox 3.0.11 Description Jakob Balle and Carsten...

Race condition while accessing the private data of a NPObject JS wrapper class object — Mozilla

Jakob Balle and Carsten Eiram of Secunia Research reported a race condition in NPObjWrapperNewResolve when accessing the properties of a NPObject, a wrapped JSObject. Balle and Eiram demonstrated that this condition could be reached by navigating away from a web page during the loading of a Java...

CVE-2008-4062

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related...

Memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related...

CVE-2008-4062

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related...