English

Calendar Discussions Polls

RSS feeds Subscriptions Contacts

The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service.

Internet threat level: 1

Follow us on

Home→Descriptions→SA34145

Mozilla Firefox Multiple Vulnerabilities

Secunia ID	SA34145
CVE-ID	CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775, CVE-2009-0776, CVE-2009-0777
Release Date	05 Mar 2009
Last Change	06 Mar 2009
Criticality	Highly Critical
Solution Status	Vendor Patch
Software	Mozilla Firefox 3.0.x
Where	From remote
Impact	System access This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user. Exposure of sensitive information Vulnerabilities where documents or credentials are leaked or can be revealed either locally or from remote. Security Bypass This covers vulnerabilities or security issues where malicious users or people can bypass certain security mechanisms of the application. The actual impact varies significantly depending on the design and purpose of the affected application. Spoofing This covers various vulnerabilities where it is possible for malicious users or people to impersonate other users or systems.
Description	Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct spoofing attacks, bypass certain security restrictions, disclose sensitive information, or compromise a user's system. 1) Multiple errors in the layout and JavaScript engines can be exploited to corrupt memory and potentially execute arbitrary code. 2) An error in the garbage collection process when handling a set of cloned XUL DOM elements linked as a parent and child can be exploited to access freed memory and execute arbitrary code. 3) An error can be exploited via the "nsIRDFService" interface and a cross-domain redirect to bypass the same-origin policy and read XML data from another domain. 4) An error in libpng when handling out-of-memory conditions can be exploited to potentially execute arbitrary code. For more information: SA33970 5) An error when handling invisible control characters included in the location bar can be exploited to spoof a trusted URL. The vulnerabilities are reported in versions prior to 3.0.7.
Solution	Update to version 3.0.7.
Reported by	The vendor credits: 1) Martijn Wargers, Jesse Ruderman, Josh Soref, Gary Kwong, and Timothee Groleau 2) an anonymous researcher, reported via ZDI 3) Georgi Guninski 5) Masahiro Yamada
Original Advisory	Mozilla: http://www.mozilla.org/security/announce/2009/mfsa2009-07.html http://www.mozilla.org/security/announce/2009/mfsa2009-08.html http://www.mozilla.org/security/announce/2009/mfsa2009-09.html http://www.mozilla.org/security/announce/2009/mfsa2009-10.html http://www.mozilla.org/security/announce/2009/mfsa2009-11.html ZDI: http://www.zerodayinitiative.com/advisories/ZDI-09-013/