[security-alerts] FW: [SA21513] Mozilla Firefox Memory Corruption Weakness

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Mozilla Firefox Memory Corruption Weakness
> 
> SECUNIA ADVISORY ID:
> SA21513
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/21513/
> 
> CRITICAL:
> Not critical
> 
> IMPACT:
> DoS
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Mozilla Firefox 1.x
> http://secunia.com/product/4227/
> 
> DESCRIPTION:
> Michal Zalewski has discovered a weakness in Firefox, which can be
> exploited by malicious people to cause a DoS (Denial of Service).
> 
> The weakness is caused due to an unspecified error and can be
> exploited to corrupt memory.
> 
> Successful exploitation crashes the browser. Execution of arbitrary
> code has not been proven, but can't be completely ruled out.
> 
> The weakness has been confirmed in version 1.5.0.6 for Windows. Other
> versions may also be affected.
> 
> NOTE: Secunia normally doesn't classify a browser crash as a
> vulnerability nor issue an advisory about it. However, the potential
> risc of this issue may be more severe than currently believed, which
> justifies for an advisory being issued.
> 
> SOLUTION:
> Do not visit untrusted web sites.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Michal Zalewski