[security-alerts] FW: [SA19802] Firefox "focus()" Memory Corruption Weakness

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> 
> TITLE:
> Firefox "focus()" Memory Corruption Weakness
> 
> SECUNIA ADVISORY ID:
> SA19802
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/19802/
> 
> CRITICAL:
> Not critical
> 
> IMPACT:
> DoS
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Mozilla Firefox 1.x
> http://secunia.com/product/4227/
> 
> DESCRIPTION:
> A weakness has been discovered in Firefox, which can be exploited by
> malicious people to cause a DoS (Denial of Service).
> 
> The weakness is caused due to an error in the handling of unexpected
> "focus()" JavaScript calls. This can be exploited to corrupt the
> memory and cause a crash by calling the "focus()" method on a
> container with specially crafted content.
> 
> The weakness has been confirmed in version 1.5.0.2. Other versions
> may also be affected.
> 
> SOLUTION:
> Disable JavaScript when visiting untrusted web sites.
> 
> PROVIDED AND/OR DISCOVERED BY:
> splices, spiffomatic64, and Securident Technologies.
> 
> ORIGINAL ADVISORY:
> http://www.securident.com/vuln/ff.txt
>