[PCWorks] Mozilla Firefox Memory Corruption vulnerability

  • From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
  • Date: Wed, 29 Apr 2009 02:09:06 -0500

TITLE:
Mozilla Firefox "nsTextFrame::ClearTextRun()" Memory Corruption

SECUNIA ADVISORY ID:
SA34866

VERIFY ADVISORY:
http://secunia.com/advisories/34866/

DESCRIPTION:
A vulnerability has been reported in Mozilla Firefox, which can 
be
exploited by malicious people to potentially compromise a user's
system.

The vulnerability is caused due to an error when calling the
"nsTextFrame::ClearTextRun()" function and can be exploited to
corrupt memory.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version 3.0.9.

SOLUTION:
Update to version 3.0.10.

ORIGINAL ADVISORY:
http://www.mozilla.org/security/announce/2009/mfsa2009-23.html


=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

Other related posts:

  • » [PCWorks] Mozilla Firefox Memory Corruption vulnerability - Clint Hamilton-PCWorks Admin