HTTP: Metasploit Firefox QueryInterface Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Mozilla Firefox browser. Firefox 1.5 is affected. Attackers using Metasploit Framework can exploit this vulnerability leading to arbitrary code execution.

Extended Description

Multiple Mozilla products are prone to multiple vulnerabilities. These issues include various memory-corruption, code-injection, and access-restriction-bypass vulnerabilities. Other undisclosed issues may have also been addressed in the various updated vendor applications. Successful exploitation of these issues may permit an attacker to execute arbitrary code in the context of the affected application. This may facilitate a compromise of the affected computer; other attacks are also possible.

Affected Products

Mozilla thunderbird

References

BugTraq: 16476

CVE: CVE-2006-0295

URL: http://www.frsirt.com/exploits/20060208.firefox_queryinterface_mac.pm.php http://www.mozilla.org/security/announce/mfsa2006-04.html

Short Name

HTTP:STC:MOZILLA:QUERYINT-OF

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: Metasploit Firefox QueryInterface Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?