HTTP: Mozilla Multiple Products Array.reduceRight Integer Overflow

This signature detects attempts to exploit a known vulnerability against multiple Mozilla products. Its due to an integer overflow occurring when the reduceRight() method is called on a JavaScript array with an extremely large length. A successful attack can lead to arbitrary code execution.

Extended Description

Mozilla Firefox, Thunderbird, and SeaMonkey are prone to a remote code-execution vulnerability. The issue occurs when handling a JavaScript array with an extremely large length and can be exploited to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. NOTE: This issue was previously discussed in BID 48354 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities) but has been given its own record to better document it.

Affected Products

Mozilla firefox

References

BugTraq: 48372

CVE: CVE-2011-2371

URL: http://www.mozilla.org/security/announce/2011/mfsa2011-22.html

Short Name

HTTP:STC:MOZILLA:REDUCE-RIGHT

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Mozilla Multiple Products Array.reduceRight Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?