Signature Detail

HTTP: Mozilla Products EnsureCachedAttrParamArrays Integer Overflow

This signature detects attempts to exploit a known vulnerability in Mozilla Products. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Mozilla Firefox and SeaMonkey are prone to a buffer-overflow vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. A successful exploit will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application. This issue is fixed in: Firefox 3.6.7 Firefox 3.5.11 SeaMonkey 2.0.6 NOTE: This issue was previously covered in BID 41824 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2010-34 Through -47 Multiple Remote Vulnerabilities), but has been assigned its own record to better document it.

Affected Products

• Avaya Aura Session Manager 1.0
• Avaya Aura Session Manager 1.1
• Avaya Aura Session Manager 5.2
• Avaya Aura Session Manager 5.2 SP1
• Avaya Aura Session Manager 5.2 SP2
• Avaya Aura Session Manager 6.0
• Avaya Aura System Manager 1.0
• Avaya Aura System Manager 5.2
• Avaya Aura System Manager 6.0 SP1
• Avaya Intuity AUDIX LX 1.0
• Avaya Intuity AUDIX LX 2.0
• Avaya Intuity AUDIX LX 2.0 SP1
• Avaya Intuity AUDIX LX 2.0 SP2
• Avaya Intuity AUDIX LX R1.1
• Avaya IQ 5
• Avaya IQ 5.1
• Avaya Message Networking 3.1
• Avaya Message Networking 5.2
• Avaya Message Networking MN 3.1
• Avaya Message Networking
• Avaya Messaging Storage Server 1.0
• Avaya Messaging Storage Server 2.0
• Avaya Messaging Storage Server 3.1
• Avaya Messaging Storage Server 3.1 SP1
• Avaya Messaging Storage Server 4.0
• Avaya Messaging Storage Server 5.0
• Avaya Messaging Storage Server 5.1
• Avaya Messaging Storage Server 5.2
• Avaya Messaging Storage Server MM3.0
• Avaya Messaging Storage Server
• Debian Linux 5.0
• Debian Linux 5.0 Alpha
• Debian Linux 5.0 Amd64
• Debian Linux 5.0 Arm
• Debian Linux 5.0 Armel
• Debian Linux 5.0 Hppa
• Debian Linux 5.0 Ia-32
• Debian Linux 5.0 Ia-64
• Debian Linux 5.0 M68k
• Debian Linux 5.0 Mips
• Debian Linux 5.0 Mipsel
• Debian Linux 5.0 Powerpc
• Debian Linux 5.0 S/390
• Debian Linux 5.0 Sparc
• Mozilla Firefox 3.5.0
• Mozilla Firefox 3.5.1
• Mozilla Firefox 3.5.10
• Mozilla Firefox 3.5.2
• Mozilla Firefox 3.5.3
• Mozilla Firefox 3.5.4
• Mozilla Firefox 3.5.5
• Mozilla Firefox 3.5.6
• Mozilla Firefox 3.5.7
• Mozilla Firefox 3.5.8
• Mozilla Firefox 3.5.9
• Mozilla Firefox 3.6
• Mozilla Firefox 3.6.2
• Mozilla Firefox 3.6.2
• Mozilla Firefox 3.6.3
• Mozilla Firefox 3.6.4
• Mozilla SeaMonkey 2.0
• Mozilla SeaMonkey 2.0.1
• Mozilla SeaMonkey 2.0.2
• Mozilla SeaMonkey 2.0.3
• Mozilla SeaMonkey 2.0.4
• Mozilla SeaMonkey 2.0.5
• Red Hat Desktop 3.0.0
• Red Hat Desktop 4.0.0
• Red Hat Enterprise Linux 5 Server
• Red Hat Enterprise Linux Desktop Version 4
• Red Hat Enterprise Linux AS 3
• Red Hat Enterprise Linux AS 4
• Red Hat Enterprise Linux Desktop 5 Client
• Red Hat Enterprise Linux Desktop Workstation 5 Client
• Red Hat Enterprise Linux ES 3
• Red Hat Enterprise Linux ES 4
• Red Hat Enterprise Linux Optional Productivity Application 5 Server
• Red Hat Enterprise Linux WS 3
• Red Hat Enterprise Linux WS 4
• Red Hat Fedora 12
• Red Hat Fedora 13
• Slackware Linux 12.2
• Slackware Linux 13.0
• Slackware Linux 13.0 X86 64
• Slackware Linux 13.1
• Slackware Linux 13.1 X86 64
• Slackware Linux -Current
• Slackware Linux X86 64 -Current
• Sun Solaris 10 Sparc
• Sun Solaris 10 X86
• Sun Solaris 11 Express
• SuSE openSUSE 11.1
• SuSE openSUSE 11.2
• SuSE openSUSE 11.3
• SuSE SUSE Linux Enterprise Desktop 10 SP3
• SuSE SUSE Linux Enterprise Desktop 11
• SuSE SUSE Linux Enterprise Desktop 11 SP1
• SuSE SUSE Linux Enterprise SDK 10 SP3
• SuSE SUSE Linux Enterprise SDK 11
• SuSE SUSE Linux Enterprise SDK 11 SP1
• SuSE SUSE Linux Enterprise Server 10 SP3
• SuSE SUSE Linux Enterprise Server 11
• SuSE SUSE Linux Enterprise Server 11 SP1
• Ubuntu Ubuntu Linux 10.04 Amd64
• Ubuntu Ubuntu Linux 10.04 I386
• Ubuntu Ubuntu Linux 10.04 Powerpc
• Ubuntu Ubuntu Linux 10.04 Sparc
• Ubuntu Ubuntu Linux 8.04 LTS Amd64
• Ubuntu Ubuntu Linux 8.04 LTS I386
• Ubuntu Ubuntu Linux 8.04 LTS Lpia
• Ubuntu Ubuntu Linux 8.04 LTS Powerpc
• Ubuntu Ubuntu Linux 8.04 LTS Sparc
• Ubuntu Ubuntu Linux 9.04 Amd64
• Ubuntu Ubuntu Linux 9.04 I386
• Ubuntu Ubuntu Linux 9.04 Lpia
• Ubuntu Ubuntu Linux 9.04 Powerpc
• Ubuntu Ubuntu Linux 9.04 Sparc
• Ubuntu Ubuntu Linux 9.10 Amd64
• Ubuntu Ubuntu Linux 9.10 I386
• Ubuntu Ubuntu Linux 9.10 Lpia
• Ubuntu Ubuntu Linux 9.10 Powerpc
• Ubuntu Ubuntu Linux 9.10 Sparc

References

• BugTraq: 41842
• CVE: CVE-2010-1214