The vulnerability of the nsDirIndexParser::ParseFormat method (netwerk\streamconv\converters\nsDirIndexParser.cpp) in browsers such as Firefox, Firefox ESR, and the email client Thunderbird arises from the lack of checks during array-based indexing. This allows an attacker to gain access to protected information.

The vulnerability of the nsDirIndexParser::ParseFormat method netwerk\streamconv\converters\nsDirIndexParser.cpp in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of checks during array indexing. Exploiting this vulnerability can allow an attacker,...

Memory corruption

The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an...

Mozilla buffer overflow in http-index-format parser

The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an...

Mozilla buffer overflow in http-index-format parser

The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an...

CVE-2008-0017: Improper Restriction of Operations within the Bounds of a Memory Buffer

The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an...