Mozilla Firefox Crafted Font Remote Code Execution Vulnerability
Publish Date: 21 de июля de 2015
Severity: : Critical
CVE Kennungen: : CVE-2010-2770,CVE-2010-2752
Advisory Date: 21 de июля de 2015
DESCRIPTION
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS X allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted font in a data: URL.
nvd: Per: http://www.mozilla.org/security/announce/2010/mfsa2010-58.html
'and cause a crash on Mac systems. The crash showed signs of memory corruption and presumably could be used by an attacker to execute arbitrary code on a victim's computer.'
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004441
Trend Micro Deep Security DPI Rule Name: 1004441 - Mozilla Firefox Crafted Font Remote Code Execution Vulnerability
AFFECTED SOFTWARE AND VERSION:
- mozilla firefox 1.0
- mozilla firefox 1.0.1
- mozilla firefox 1.0.2
- mozilla firefox 1.0.3
- mozilla firefox 1.0.4
- mozilla firefox 1.0.5
- mozilla firefox 1.0.6
- mozilla firefox 1.0.7
- mozilla firefox 1.0.8
- mozilla firefox 1.5
- mozilla firefox 1.5.0.1
- mozilla firefox 1.5.0.10
- mozilla firefox 1.5.0.11
- mozilla firefox 1.5.0.12
- mozilla firefox 1.5.0.2
- mozilla firefox 1.5.0.3
- mozilla firefox 1.5.0.4
- mozilla firefox 1.5.0.5
- mozilla firefox 1.5.0.6
- mozilla firefox 1.5.0.7
- mozilla firefox 1.5.0.8
- mozilla firefox 1.5.0.9
- mozilla firefox 1.5.1
- mozilla firefox 1.5.2
- mozilla firefox 1.5.3
- mozilla firefox 1.5.4
- mozilla firefox 1.5.5
- mozilla firefox 1.5.6
- mozilla firefox 1.5.7
- mozilla firefox 1.5.8
- mozilla firefox 2.0
- mozilla firefox 2.0.0.1
- mozilla firefox 2.0.0.10
- mozilla firefox 2.0.0.11
- mozilla firefox 2.0.0.12
- mozilla firefox 2.0.0.13
- mozilla firefox 2.0.0.14
- mozilla firefox 2.0.0.15
- mozilla firefox 2.0.0.16
- mozilla firefox 2.0.0.17
- mozilla firefox 2.0.0.18
- mozilla firefox 2.0.0.19
- mozilla firefox 2.0.0.2
- mozilla firefox 2.0.0.20
- mozilla firefox 2.0.0.3
- mozilla firefox 2.0.0.4
- mozilla firefox 2.0.0.5
- mozilla firefox 2.0.0.6
- mozilla firefox 2.0.0.7
- mozilla firefox 2.0.0.8
- mozilla firefox 2.0.0.9
- mozilla firefox 3.0
- mozilla firefox 3.0.1
- mozilla firefox 3.0.10
- mozilla firefox 3.0.11
- mozilla firefox 3.0.12
- mozilla firefox 3.0.13
- mozilla firefox 3.0.14
- mozilla firefox 3.0.15
- mozilla firefox 3.0.16
- mozilla firefox 3.0.17
- mozilla firefox 3.0.2
- mozilla firefox 3.0.3
- mozilla firefox 3.0.4
- mozilla firefox 3.0.5
- mozilla firefox 3.0.6
- mozilla firefox 3.0.7
- mozilla firefox 3.0.8
- mozilla firefox 3.0.9
- mozilla firefox 3.5
- mozilla firefox 3.5.1
- mozilla firefox 3.5.10
- mozilla firefox 3.5.11
- mozilla firefox 3.5.2
- mozilla firefox 3.5.3
- mozilla firefox 3.5.4
- mozilla firefox 3.5.5
- mozilla firefox 3.5.6
- mozilla firefox 3.5.7
- mozilla firefox 3.5.8
- mozilla firefox 3.5.9
- mozilla firefox 3.6
- mozilla firefox 3.6.2
- mozilla firefox 3.6.3
- mozilla firefox 3.6.4
- mozilla firefox 3.6.6
- mozilla firefox 3.6.7
- mozilla firefox 3.6.8
- mozilla seamonkey 1.0
- mozilla seamonkey 1.0.1
- mozilla seamonkey 1.0.2
- mozilla seamonkey 1.0.3
- mozilla seamonkey 1.0.4
- mozilla seamonkey 1.0.5
- mozilla seamonkey 1.0.6
- mozilla seamonkey 1.0.7
- mozilla seamonkey 1.0.8
- mozilla seamonkey 1.0.9
- mozilla seamonkey 1.1
- mozilla seamonkey 1.1.1
- mozilla seamonkey 1.1.10
- mozilla seamonkey 1.1.11
- mozilla seamonkey 1.1.12
- mozilla seamonkey 1.1.13
- mozilla seamonkey 1.1.14
- mozilla seamonkey 1.1.15
- mozilla seamonkey 1.1.16
- mozilla seamonkey 1.1.17
- mozilla seamonkey 1.1.18
- mozilla seamonkey 1.1.19
- mozilla seamonkey 1.1.2
- mozilla seamonkey 1.1.3
- mozilla seamonkey 1.1.4
- mozilla seamonkey 1.1.5
- mozilla seamonkey 1.1.6
- mozilla seamonkey 1.1.7
- mozilla seamonkey 1.1.8
- mozilla seamonkey 1.1.9
- mozilla seamonkey 1.5.0.10
- mozilla seamonkey 1.5.0.8
- mozilla seamonkey 1.5.0.9
- mozilla seamonkey 2.0
- mozilla seamonkey 2.0.1
- mozilla seamonkey 2.0.2
- mozilla seamonkey 2.0.3
- mozilla seamonkey 2.0.4
- mozilla seamonkey 2.0.5
- mozilla seamonkey 2.0.6
- mozilla seamonkey 2.0a1pre
- mozilla thunderbird 0.1
- mozilla thunderbird 0.2
- mozilla thunderbird 0.3
- mozilla thunderbird 0.4
- mozilla thunderbird 0.5
- mozilla thunderbird 0.6
- mozilla thunderbird 0.7
- mozilla thunderbird 0.7.1
- mozilla thunderbird 0.7.2
- mozilla thunderbird 0.7.3
- mozilla thunderbird 0.8
- mozilla thunderbird 0.9
- mozilla thunderbird 1.0
- mozilla thunderbird 1.0.1
- mozilla thunderbird 1.0.2
- mozilla thunderbird 1.0.3
- mozilla thunderbird 1.0.4
- mozilla thunderbird 1.0.5
- mozilla thunderbird 1.0.6
- mozilla thunderbird 1.0.7
- mozilla thunderbird 1.0.8
- mozilla thunderbird 1.5
- mozilla thunderbird 1.5.0.1
- mozilla thunderbird 1.5.0.10
- mozilla thunderbird 1.5.0.11
- mozilla thunderbird 1.5.0.12
- mozilla thunderbird 1.5.0.13
- mozilla thunderbird 1.5.0.14
- mozilla thunderbird 1.5.0.2
- mozilla thunderbird 1.5.0.3
- mozilla thunderbird 1.5.0.4
- mozilla thunderbird 1.5.0.5
- mozilla thunderbird 1.5.0.6
- mozilla thunderbird 1.5.0.7
- mozilla thunderbird 1.5.0.8
- mozilla thunderbird 1.5.0.9
- mozilla thunderbird 1.5.1
- mozilla thunderbird 1.5.2
- mozilla thunderbird 2.0
- mozilla thunderbird 2.0.0.0
- mozilla thunderbird 2.0.0.1
- mozilla thunderbird 2.0.0.12
- mozilla thunderbird 2.0.0.14
- mozilla thunderbird 2.0.0.16
- mozilla thunderbird 2.0.0.17
- mozilla thunderbird 2.0.0.18
- mozilla thunderbird 2.0.0.19
- mozilla thunderbird 2.0.0.2
- mozilla thunderbird 2.0.0.21
- mozilla thunderbird 2.0.0.22
- mozilla thunderbird 2.0.0.23
- mozilla thunderbird 2.0.0.3
- mozilla thunderbird 2.0.0.4
- mozilla thunderbird 2.0.0.5
- mozilla thunderbird 2.0.0.6
- mozilla thunderbird 2.0.0.7
- mozilla thunderbird 2.0.0.8
- mozilla thunderbird 2.0.0.9
- mozilla thunderbird 3.0
- mozilla thunderbird 3.0.1
- mozilla thunderbird 3.0.2
- mozilla thunderbird 3.0.3
- mozilla thunderbird 3.0.4
- mozilla thunderbird 3.0.5
- mozilla thunderbird 3.0.6
- mozilla thunderbird 3.1
- mozilla thunderbird 3.1.1
- mozilla thunderbird 3.1.2