medium4.3Public exploit code
CVE-2008-2419
Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by tri…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Firefox 2.0.0.14 - JSframe Heap Corruption Denial of Service2008-05-21 · dos · multiple · Verified
Impact
Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by triggering an error condition during certain Iframe operations between a JSframe write and a JSframe close, as demonstrated by an error in loading an empty Java applet defined by a 'src="javascript:"' sequence.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Version 2.0.0.14 |