Skip to Content.
Sympa Menu

sm-security - [SM-Security] [SMGLSA-2006-24] firefox: Deleted Object Reference Vulnerability

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Ladislav Hagara <ladislav.hagara AT unob.cz>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] [SMGLSA-2006-24] firefox: Deleted Object Reference Vulnerability
  • Date: Wed, 03 May 2006 16:46:26 +0200

Description:
A vulnerability has been reported in Firefox, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

The vulnerability is caused due to a reference to a deleted object when designMode is enabled. This can be exploited to corrupt the memory and cause a crash by calling the "contentWindow.focus()" method on a container with specially crafted content.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been reported in versions 1.5 through 1.5.0.2.

Solution:
Update to version 1.5.0.3.
http://www.mozilla.com/firefox/




For more info:
http://www.mozilla.org/security/announce/2006/mfsa2006-30.html
http://secunia.com/advisories/19802/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1993



-----
All firefox users using devel, test and stable-rc griomoire should update to version 1.5.0.3. Users using stable grimoire (firefox 1.0.8) are not affected.


# sorcery system-update

or

# scribe update
# cast ethereal

or

# scribe update
# sorcery queue-security
# cast --queue


--
Ladislav Hagara



  • [SM-Security] [SMGLSA-2006-24] firefox: Deleted Object Reference Vulnerability, Ladislav Hagara, 05/03/2006

Archive powered by MHonArc 2.6.24.

Top of Page