CVE-2009-1232

EPSS 5.5%

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/8306unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar https://bugzilla.mozilla.org/show_bug.cgi?id=485941 https://exchange.xforce.ibmcloud.com/vulnerabilities/49521 https://www.exploit-db.com/exploits/8306 http://websecurity.com.ua/3216/http://www.securityfocus.com/bid/34522