Signature Detail
Short Name |
HTTP:STC:MOZILLA:DOMNODEREMOVED |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Mozilla Firefox DOMNodeRemoved Memory Corruption |
Release Date |
2010/09/17 |
Update Number |
1775 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Mozilla Firefox DOMNodeRemoved Memory Corruption
This signature detects attempts to exploit a known vulnerability in Mozilla Firefox. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.
Extended Description
The Mozilla Foundation has released thirteen security advisories specifying security vulnerabilities in Mozilla Firefox, SeaMonkey, Camino, and Thunderbird. These vulnerabilities allow attackers to: - execute arbitrary machine code in the context of the vulnerable application - crash affected applications - run JavaScript code with elevated privileges, potentially allowing the remote execution of machine code - gain access to potentially sensitive information. Other attacks may also be possible. The issues described here will be split into individual BIDs as further information becomes available. These issues are fixed in: - Mozilla Firefox version 1.5.0.4 - Mozilla Thunderbird version 1.5.0.4 - Mozilla SeaMonkey version 1.0.2 - Mozilla Camino 1.0.2
Affected Products
- Apple iPhone 1
- Apple iPhone 1.0.1
- Apple iPhone 1.0.2
- Apple iPhone 1.1
- Apple iPhone 1.1.1
- Apple iPhone 1.1.2
- Apple iPhone 1.1.3
- Apple iPhone 1.1.4
- Apple iPhone
- Apple iPod Touch 1.1
- Apple iPod Touch 1.1.1
- Apple iPod Touch 1.1.2
- Apple iPod Touch 1.1.3
- Apple iPod Touch 1.1.4
- Apple iPod Touch
- Apple Safari 1.0.0
- Apple Safari 1.1.0
- Apple Safari 1.2.0
- Apple Safari 1.2.1
- Apple Safari 1.2.2
- Apple Safari 1.2.3
- Apple Safari 1.3.0
- Apple Safari 1.3.1
- Apple Safari 1.3.2
- Apple Safari 2.0.1
- Apple Safari 2.0.2
- Apple Safari 2.0.3
- Apple Safari 2.0.4
- Apple Safari 3
- Apple Safari 3.1
- Apple Safari 3.1.1
- Apple Safari 3.1.1 For Windows
- Apple Safari 3.1.2
- Apple Safari 3.1.2 For Windows
- Apple Safari 3.1 For Windows
- Apple Safari 3.2
- Apple Safari 3.2.2 For Windows
- Apple Safari 3.2.3
- Apple Safari 3.2.3 For Windows
- Debian Linux 3.1.0
- Debian Linux 3.1.0 Alpha
- Debian Linux 3.1.0 Amd64
- Debian Linux 3.1.0 Arm
- Debian Linux 3.1.0 Hppa
- Debian Linux 3.1.0 Ia-32
- Debian Linux 3.1.0 Ia-64
- Debian Linux 3.1.0 M68k
- Debian Linux 3.1.0 Mips
- Debian Linux 3.1.0 Mipsel
- Debian Linux 3.1.0 Ppc
- Debian Linux 3.1.0 S/390
- Debian Linux 3.1.0 Sparc
- Gentoo Linux
- HP HP-UX B.11.11
- HP HP-UX B.11.23
- HP HP-UX B.11.31
- Mandriva Corporate Server 3.0.0
- Mandriva Corporate Server 3.0.0 X86 64
- Mandriva Linux Mandrake 2006.0.0
- Mandriva Linux Mandrake 2006.0.0 X86 64
- Mozilla Camino 0.7.0 .0
- Mozilla Camino 0.8.0
- Mozilla Camino 0.8.3
- Mozilla Camino 0.8.4
- Mozilla Camino 1.0
- Mozilla Camino 1.0.1
- Mozilla Firefox 0.10.0
- Mozilla Firefox 0.10.1
- Mozilla Firefox 0.8.0
- Mozilla Firefox 0.9.0
- Mozilla Firefox 0.9.0 Rc
- Mozilla Firefox 0.9.1
- Mozilla Firefox 0.9.2
- Mozilla Firefox 0.9.3
- Mozilla Firefox 1.0.0
- Mozilla Firefox 1.0.1
- Mozilla Firefox 1.0.2
- Mozilla Firefox 1.0.3
- Mozilla Firefox 1.0.4
- Mozilla Firefox 1.0.5
- Mozilla Firefox 1.0.6
- Mozilla Firefox 1.0.7
- Mozilla Firefox 1.0.8
- Mozilla Firefox 1.5.0
- Mozilla Firefox 1.5.0.1
- Mozilla Firefox 1.5.0.2
- Mozilla Firefox 1.5.0.3
- Mozilla Firefox 1.5.0 Beta 1
- Mozilla Firefox 1.5.0 Beta 2
- Mozilla Firefox Preview Release
- Mozilla SeaMonkey 1.0
- Mozilla SeaMonkey 1.0.1
- Mozilla SeaMonkey 1.0 Dev
- Mozilla Thunderbird 0.6.0
- Mozilla Thunderbird 0.7.0
- Mozilla Thunderbird 0.7.1
- Mozilla Thunderbird 0.7.2
- Mozilla Thunderbird 0.7.3
- Mozilla Thunderbird 0.8.0
- Mozilla Thunderbird 0.9.0
- Mozilla Thunderbird 1.0.0
- Mozilla Thunderbird 1.0.1
- Mozilla Thunderbird 1.0.2
- Mozilla Thunderbird 1.0.5
- Mozilla Thunderbird 1.0.6
- Mozilla Thunderbird 1.0.7
- Mozilla Thunderbird 1.0.8
- Mozilla Thunderbird 1.5.0
- Mozilla Thunderbird 1.5.0.1
- Mozilla Thunderbird 1.5.0.2
- Mozilla Thunderbird 1.5.0 Beta 2
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0 IA64
- Red Hat Desktop 3.0.0
- Red Hat Desktop 4.0.0
- Red Hat Enterprise Linux AS 2.1
- Red Hat Enterprise Linux AS 2.1 IA64
- Red Hat Enterprise Linux AS 3
- Red Hat Enterprise Linux AS 4
- Red Hat Enterprise Linux ES 2.1
- Red Hat Enterprise Linux ES 2.1 IA64
- Red Hat Enterprise Linux ES 3
- Red Hat Enterprise Linux ES 4
- Red Hat Enterprise Linux WS 2.1
- Red Hat Enterprise Linux WS 2.1 IA64
- Red Hat Enterprise Linux WS 3
- Red Hat Enterprise Linux WS 4
- Sun Solaris 10 X86
- Sun Solaris 8 Sparc
- Sun Solaris 8 X86
- Sun Solaris 9 Sparc
- Sun Solaris 9 X86
- SuSE Linux Personal 10.1
- SuSE Linux Professional 10.1
- Ubuntu Ubuntu Linux 5.0.0 4 Amd64
- Ubuntu Ubuntu Linux 5.0.0 4 I386
- Ubuntu Ubuntu Linux 5.0.0 4 Powerpc
- Ubuntu Ubuntu Linux 5.10.0 Amd64
- Ubuntu Ubuntu Linux 5.10.0 I386
- Ubuntu Ubuntu Linux 5.10.0 Powerpc
- Ubuntu Ubuntu Linux 5.10.0 Sparc
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
References
- BugTraq: 18228
- CVE: CVE-2006-2779