Summary
The host is installed with Mozilla Firefox browser and is prone to denial of service vulnerability.
Impact
Successful remote exploitation could result in denying the service.
Impact Level: Application
Solution
Upgrade to Firefox version 3.6.3 or later,
For updates refer to http://www.mozilla.com/en-US/firefox/all.html
Insight
Null pointer dereferencing error occurs in the broswer which fails to validate the user input data when designMode module is enabled. These can be exploited via replaceChild or removeChild call, followed by a queryCommandValue, queryCommandState or queryCommandIndeterm call.
Affected
Firefox version 3.x to 3.0.5 on Windows.
References
Severity
Classification
-
CVE CVE-2009-0071 -
CVSS Base Score: 2.6
AV:N/AC:H/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- osTicket Support Address DoS
- ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
- Wireshark IEEE 802.11 Dissector Denial of Service Vulnerability (Mac OS X)
- Wireshark Multiple Denial of Service Vulnerabilities - July 12 (Mac OS X)
- Sun VirtualBox or xVM VirtualBox Denial Of Service Vulnerability (Win)