Test ID:	1.3.6.1.4.1.25623.1.0.800405
Category:	Denial of Service
Title:	Firefox Browser designMode Null Pointer Dereference DoS Vulnerability - Win
Summary:	Mozilla Firefox browser is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Mozilla Firefox browser is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Null pointer dereferencing error occurs in the browser which fails to validate the user input data when designMode module is enabled. These can be exploited via replaceChild or removeChild call, followed by a queryCommandValue, queryCommandState or queryCommandIndeterm call. Vulnerability Impact: Successful remote exploitation could result in denying the service. Affected Software/OS: Firefox version 3.x to 3.0.5 on Windows. Solution: Upgrade to Firefox version 3.6.3 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0071 BugTraq ID: 33154 http://www.securityfocus.com/bid/33154 https://www.exploit-db.com/exploits/8091 https://www.exploit-db.com/exploits/8219 http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.