medium5.0Public exploit code
CVE-2009-2953
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Firefox 3.0.5 - location.hash Remote Crash2008-12-23 · dos · windows · Verified
Impact
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11 |