Signature Detail
Short Name |
HTTP:STC:MOZILLA:SHAREDWORK-UAF |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Mozilla Firefox SharedWorker MessagePort Use After Free |
Release Date |
2014/08/06 |
Update Number |
2406 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Mozilla Firefox SharedWorker MessagePort Use After Free
This signature detects attempts to exploit a known vulnerability against Mozilla Firefox. The vulnerability is due to a memory corruption issue when handling SharedWorker objects. A remote unauthenticated attacker could exploit this vulnerability by enticing a user to visit a malicious page. Successful exploitation could lead to remote code execution under the security context of the browser process.
References
- BugTraq: 68818
- CVE: CVE-2014-1548