Mozilla Firefox File Input Element Memory Corruption
Severity: : Critical
CVE Kennungen: : CVE-2008-5021
Advisory Date: 21 de июля de 2015
DESCRIPTION
nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1003047
Trend Micro Deep Security DPI Rule Name: 1003047 - Mozilla Firefox File Input Element Memory Corruption
AFFECTED SOFTWARE AND VERSION:
- mozilla firefox 0.10
- mozilla firefox 0.10.1
- mozilla firefox 0.8
- mozilla firefox 0.9
- mozilla firefox 0.9.1
- mozilla firefox 0.9.2
- mozilla firefox 0.9.3
- mozilla firefox 0.9_rc
- mozilla firefox 1.0
- mozilla firefox 1.0.1
- mozilla firefox 1.0.2
- mozilla firefox 1.0.3
- mozilla firefox 1.0.4
- mozilla firefox 1.0.5
- mozilla firefox 1.0.6
- mozilla firefox 1.0.7
- mozilla firefox 1.0.8
- mozilla firefox 1.5
- mozilla firefox 1.5.0.1
- mozilla firefox 1.5.0.10
- mozilla firefox 1.5.0.11
- mozilla firefox 1.5.0.12
- mozilla firefox 1.5.0.2
- mozilla firefox 1.5.0.3
- mozilla firefox 1.5.0.4
- mozilla firefox 1.5.0.5
- mozilla firefox 1.5.0.6
- mozilla firefox 1.5.0.7
- mozilla firefox 1.5.0.8
- mozilla firefox 1.5.0.9
- mozilla firefox 1.5.1
- mozilla firefox 1.5.2
- mozilla firefox 1.5.3
- mozilla firefox 1.5.4
- mozilla firefox 1.5.5
- mozilla firefox 1.5.6
- mozilla firefox 1.5.7
- mozilla firefox 1.5.8
- mozilla firefox 1.8
- mozilla firefox 2.0
- mozilla firefox 2.0.0.1
- mozilla firefox 2.0.0.10
- mozilla firefox 2.0.0.11
- mozilla firefox 2.0.0.12
- mozilla firefox 2.0.0.13
- mozilla firefox 2.0.0.14
- mozilla firefox 2.0.0.15
- mozilla firefox 2.0.0.16
- mozilla firefox 2.0.0.17
- mozilla firefox 2.0.0.2
- mozilla firefox 2.0.0.3
- mozilla firefox 2.0.0.4
- mozilla firefox 2.0.0.5
- mozilla firefox 2.0.0.6
- mozilla firefox 2.0.0.7
- mozilla firefox 2.0.0.8
- mozilla firefox 2.0.0.9
- mozilla seamonkey 1.0
- mozilla seamonkey 1.0.1
- mozilla seamonkey 1.0.2
- mozilla seamonkey 1.0.3
- mozilla seamonkey 1.0.4
- mozilla seamonkey 1.0.5
- mozilla seamonkey 1.0.6
- mozilla seamonkey 1.0.7
- mozilla seamonkey 1.0.8
- mozilla seamonkey 1.0.9
- mozilla seamonkey 1.0.99
- mozilla seamonkey 1.1
- mozilla seamonkey 1.1.1
- mozilla seamonkey 1.1.10
- mozilla seamonkey 1.1.11
- mozilla seamonkey 1.1.12
- mozilla seamonkey 1.1.2
- mozilla seamonkey 1.1.3
- mozilla seamonkey 1.1.4
- mozilla seamonkey 1.1.5
- mozilla seamonkey 1.1.6
- mozilla seamonkey 1.1.7
- mozilla seamonkey 1.1.8
- mozilla seamonkey 1.1.9
- mozilla thunderbird 0.1
- mozilla thunderbird 0.2
- mozilla thunderbird 0.3
- mozilla thunderbird 0.4
- mozilla thunderbird 0.5
- mozilla thunderbird 0.6
- mozilla thunderbird 0.7
- mozilla thunderbird 0.7.1
- mozilla thunderbird 0.7.2
- mozilla thunderbird 0.7.3
- mozilla thunderbird 0.8
- mozilla thunderbird 0.9
- mozilla thunderbird 1.0
- mozilla thunderbird 1.0.1
- mozilla thunderbird 1.0.2
- mozilla thunderbird 1.0.3
- mozilla thunderbird 1.0.4
- mozilla thunderbird 1.0.5
- mozilla thunderbird 1.0.6
- mozilla thunderbird 1.0.7
- mozilla thunderbird 1.0.8
- mozilla thunderbird 1.5
- mozilla thunderbird 1.5.0.1
- mozilla thunderbird 1.5.0.10
- mozilla thunderbird 1.5.0.11
- mozilla thunderbird 1.5.0.2
- mozilla thunderbird 1.5.0.3
- mozilla thunderbird 1.5.0.4
- mozilla thunderbird 1.5.0.6
- mozilla thunderbird 1.5.0.7
- mozilla thunderbird 1.5.0.8
- mozilla thunderbird 1.5.0.9
- mozilla thunderbird 1.5.1
- mozilla thunderbird 1.5.2
- mozilla thunderbird 1.7.1
- mozilla thunderbird 1.7.3
- mozilla thunderbird 2.0.0.0
- mozilla thunderbird 2.0.0.1
- mozilla thunderbird 2.0.0.11
- mozilla thunderbird 2.0.0.12
- mozilla thunderbird 2.0.0.13
- mozilla thunderbird 2.0.0.14
- mozilla thunderbird 2.0.0.15
- mozilla thunderbird 2.0.0.16
- mozilla thunderbird 2.0.0.17
- mozilla thunderbird 2.0.0.2
- mozilla thunderbird 2.0.0.3
- mozilla thunderbird 2.0.0.4