HTTP: Javascript Heap Spray Attempt Detection

This signature detects attempts to trigger an exploit that leverages a precise Heap Spraying technique referred to as "js_property_spray". Such exploits are part of an attack that, if successful, could allow an attacker to execute arbitrary code on the targeted system.

Extended Description

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Affected Products

Mozilla firefox

References

BugTraq: 35660 51755

CVE: CVE-2011-3659

URL: http://www.mozilla.org/security/announce/2009/mfsa2009-41.html https://bugzilla.mozilla.org/show_bug.cgi?id=503286

Short Name

HTTP:STC:SCRIPT:HEAPSPRAY

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Javascript Heap Spray Attempt Detection

Extended Description

Affected Products

References

Found a potential security threat?