Mozilla Firefox 3.5 'TraceMonkey' Component Remote Code Execution Vulnerability

  Severity: MEDIUM
  CVE Identifier: CVE-2009-2477
  Advisory Date: JUL 21, 2015

  DESCRIPTION

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003625
  Trend Micro Deep Security DPI Rule Name: 1003625 - Mozilla Firefox 3.5 Remote Buffer Overflow

  AFFECTED SOFTWARE AND VERSION

  • mozilla firefox 3.5