Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.800406
Category:Denial of Service
Title:Mozilla Firefox designMode Null Pointer Dereference DoS Vulnerability - Linux
Summary:Mozilla Firefox is prone to a denial of service (DoS) vulnerability.
Description:Summary:
Mozilla Firefox is prone to a denial of service (DoS) vulnerability.

Vulnerability Insight:
Null pointer dereferencing error occurs in the browser which fails to validate
the user input data when designMode module is enabled. These can be exploited
via replaceChild or removeChild call, followed by a queryCommandValue,
queryCommandState or queryCommandIndeterm call.

Vulnerability Impact:
Successful remote exploitation could result in denying the service.

Affected Software/OS:
Mozilla Firefox version 3.x to 3.0.5.

Solution:
Update to version 3.6.3 or later.

CVSS Score:
2.6

CVSS Vector:
AV:N/AC:H/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2009-0071
BugTraq ID: 33154
http://www.securityfocus.com/bid/33154
https://www.exploit-db.com/exploits/8091
https://www.exploit-db.com/exploits/8219
http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html
http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html
http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html
CopyrightCopyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.