Sponsored Links

Another critical Mozilla/Firefox Flaw -arbitrary memory exposure

Mel

0
A vulnerability has been discovered in Mozilla Firefox, which can be exploited by malicious people to gain knowledge of potentially sensitive information.

The vulnerability is caused due to an error in the JavaScript engine, as a "lambda" replace exposes arbitrary amounts of heap memory after the end of a JavaScript string.

Successful exploitation may disclose sensitive information in memory

(possible exposure of passwords and sensitive information from forms)

Demo Exploit here:-

http://secunia.com/mozilla_products_arbitrary_memory_exposure_test/

I understand firefox 1.03 will be released shortly to fix this flaw.
 
so it isnt really Mozilla at fault, its Sun Java.
 
Sponsored Links
Captain_Cretin said:
so it isnt really Mozilla at fault, its Sun Java.


It's Javascript - nothing to do with Java, ie a mozilla flaw (full advisory here http://secunia.com/advisories/14820/ ), although not as serious as the Gif image buffer overflow vulnerability in the previous version which allowed arbitary code execution ( http://www.securityfocus.com/advisories/8275 ).


There's a release candidate available that should fix this. If you intend visiting a banking site with a vulnerable version I'd suggest closing the browser down and starting a new instance and closing that before visiting any other sites.
 
I stand corrected ( and will whip myself with birch twigs as soon as I can find some)
 
Top
Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £26.00
132Mbps
Gift: None
Shell Energy UK ISP Logo
Shell Energy £26.99
109Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £27.99
145Mbps
Gift: None
Zen Internet UK ISP Logo
Zen Internet £28.00 - 35.00
100Mbps
Gift: None
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
YouFibre UK ISP Logo
YouFibre £19.99
150Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
BeFibre UK ISP Logo
BeFibre £21.00
150Mbps
Gift: £25 Love2Shop Card
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Large Availability | View All

Helpful ISP Guides and Tips

Sponsored Links
The Top 15 Category Tags
  1. FTTP (5508)
  2. BT (3513)
  3. Politics (2535)
  4. Openreach (2296)
  5. Business (2260)
  6. Building Digital UK (2243)
  7. FTTC (2042)
  8. Mobile Broadband (1971)
  9. Statistics (1787)
  10. 4G (1662)
  11. Virgin Media (1617)
  12. Ofcom Regulation (1459)
  13. Fibre Optic (1393)
  14. Wireless Internet (1389)
  15. FTTH (1381)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules