Mozilla Firefox/Thunderbird/SeaMonkey – XSLT Integer Overflow

Exploit Database
269 阅读

作者： Martin Barbella

日期： 2010-06-22
类别：
- remote
平台：
- linux
来源：https://www.exploit-db.com/exploits/34192/

source: https://www.securityfocus.com/bid/41082/info

Mozilla Firefox, SeaMonkey, and Thunderbird are prone to a remote integer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts will likely result in denial-of-service conditions.

These issues are fixed in:

Firefox 3.6.4

Firefox 3.5.10

Thunderbird 3.0.5

SeaMonkey 2.0.5

NOTE: This issue was previously covered in BID 41050 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2010-26/27/28/29/30/32 Remote Vulnerabilities) but has been given its own record to better document it.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34192.zip

last Exploits
Mozilla Firefox/Thunderbird/SeaMonkey – XSLT Integer Overflow的更多信息

ActFax Server FTP – (Authenticated) Remote Buffer Overflow：
EasyFTP Server 1.7.0.2 – CWD Buffer Overflow (Metasploit)：
Apple Safari – ‘file://’ Arbitrary Code Execution (Metasploit)：
AROX School-ERP Pro – Unauthenticated Remote Command Execution (Metasploit)：
CA BrightStor ARCserve – Message Engine Heap Overflow (Metasploit)：
Citrix Provisioning Services 5.6 – ‘streamprocess.exe’ Remote Buffer Overflow (Metasploit)：
Trend Micro OfficeScan 11.0/XG (12.0) – Man In The Middle Remote Code Execution：
DarkComet Server – Arbitrary File Download (Metasploit)：