HTTP: Mozilla Firefox Plugin Parameter Array Dangling Pointer

This signature detects attempts to exploit a known vulnerability in Mozilla Firefox. It is due to an error while handling plugins parameters contained in a malicious <object> tag. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted Web page. Successful exploitation can result in arbitrary code execution in the context of the application.

Extended Description

Mozilla Firefox is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. This issue is fixed in Firefox 3.6.8.

Affected Products

Avaya aura_session_manager

References

BugTraq: 41933

CVE: CVE-2010-2755

URL: http://www.mozilla.org/security/announce/2010/mfsa2010-48.html

Short Name

HTTP:STC:MOZILLA:ARRAY-DANGLE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Mozilla Firefox Plugin Parameter Array Dangling Pointer

Extended Description

Affected Products

References

Found a potential security threat?