Mozilla Firefox Malformed GIF File Denial of Service Vulnerability
BID:27243
Info
Mozilla Firefox Malformed GIF File Denial of Service Vulnerability
| Bugtraq ID: | 27243 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2007-6715 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2008 12:00AM |
| Updated: | May 07 2015 05:33PM |
| Credit: | Sam Hocevar |
| Vulnerable: |
Mozilla Firefox 2.0 .9 Mozilla Firefox 2.0 .8 Mozilla Firefox 2.0 .7 Mozilla Firefox 2.0 .6 Mozilla Firefox 2.0 .5 Mozilla Firefox 2.0 .4 Mozilla Firefox 2.0 .3 Mozilla Firefox 2.0 .10 Mozilla Firefox 2.0 .1 Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox 1.5 12 Mozilla Firefox 1.5 .8 Mozilla Firefox 1.5 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.11 Mozilla Firefox 2.0 RC3 Mozilla Firefox 2.0 RC2 Mozilla Firefox 2.0 beta 1 Mozilla Firefox 2.0 Mozilla Firefox 1.5.0.9 Mozilla Firefox 1.5.0.7 Mozilla Firefox 1.5.0.6 Mozilla Firefox 1.5.0.5 Mozilla Firefox 1.5.0.4 Mozilla Firefox 1.5.0.3 Mozilla Firefox 1.5.0.2 Mozilla Firefox 1.5.0.11 Mozilla Firefox 1.5.0.10 Mozilla Firefox 1.5.0.1 |
| Not Vulnerable: | |
Discussion
Mozilla Firefox Malformed GIF File Denial of Service Vulnerability
Mozilla Firefox is prone to a remote denial-of-service vulnerability.
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.
Mozilla Firefox is prone to a remote denial-of-service vulnerability.
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.
Exploit / POC
Mozilla Firefox Malformed GIF File Denial of Service Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim to view a malicious GIF file.
The 'zzuf' fuzzing tool demonstrates this issue. The tool can be obtained from the following website:
http://sam.zoy.org/zzuf/
Attackers can exploit this issue by enticing an unsuspecting victim to view a malicious GIF file.
The 'zzuf' fuzzing tool demonstrates this issue. The tool can be obtained from the following website:
http://sam.zoy.org/zzuf/
Solution / Fix
Mozilla Firefox Malformed GIF File Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Mozilla Firefox Malformed GIF File Denial of Service Vulnerability
References:
References:
- How long does it take to fix a crash-bug? (Hanno Bock)
- Mozilla Homepage (Mozilla Foundation)
- re-resting of zzuf results ('Hanno =?utf-8?q?B=C3=B6ck?='