HTTP: Firefox Malformed SVG Index Parameter

This signature detects attempts to exploit a known vulnerability in Mozilla Firefox. An attacker can create a Web site with Web pages containing dangerous SVG calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

The Mozilla Foundation has released six security advisories specifying vulnerabilities in Firefox, SeaMonkey, and Thunderbird. These vulnerabilities allow attackers to: - Execute arbitrary code - Cause denial-of-service conditions - Perform cross-site scripting attacks - Obtain potentially sensitive information - Spoof legitimate content Other attacks may also be possible.

Affected Products

Mozilla thunderbird

References

BugTraq: 24242

CVE: CVE-2007-2867

URL: http://www.mozilla.org/security/announce/2007/mfsa2007-12.html

Short Name

HTTP:STC:MOZILLA:MAL-SVG-INDEX

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: Firefox Malformed SVG Index Parameter

Extended Description

Affected Products

References

Found a potential security threat?