Mozilla Firefox Beatnik Extension Remote Script Code Execution Vulnerability

Bugtraq ID:	24324
Class:	Input Validation Error
CVE:	CVE-2007-3110
Remote:	Yes
Local:	No
Published:	Jun 05 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	CrYpTiC MauleR is credited with the discovery of this issue.
Vulnerable:	Beatnik Player Beatnik Player for Firefox 1.0
Not Vulnerable:

Mozilla Firefox Beatnik Extension Remote Script Code Execution Vulnerability

A remote code-execution vulnerability affects the Beatnik extension for Mozilla Firefox because the application fails to validate input errors when processing RSS feeds.

An attacker may leverage this issue to execute arbitrary code in the context of the user account running the affected extension. This may facilitate cross-site scripting as well as a compromise of an affected computer.

Beatnik 1.0 is vulnerable; other versions may also be affected.

Mozilla Firefox Beatnik Extension Remote Script Code Execution Vulnerability

Attackers can use a browser to exploit this issue.

Mozilla Firefox Beatnik Extension Remote Script Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Firefox Beatnik Extension Remote Script Code Execution Vulnerability

References:

• Beatnik Player Web Site (Beatnik)
  
• Mozilla Homepage (Mozilla Foundation)