Mozilla Firefox User Interface Dispatcher Null Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	31476
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-4324
Remote:	Yes
Local:	No
Published:	Sep 29 2008 12:00AM
Updated:	Nov 25 2008 01:53PM
Credit:	Aditya K Sood
Vulnerable:	Pardus Linux 2008 0 Pardus Linux 2007 0 Mozilla Firefox 3.0.3
Not Vulnerable:

Mozilla Firefox User Interface Dispatcher Null Pointer Dereference Denial of Service Vulnerability

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.

NOTE: This issue may be related to the issues covered in BID 30486 (Mozilla Firefox Unspecified Denial of Service Vulnerability).

Firefox 3.0.3 is vulnerable; other versions may also be affected.

Mozilla Firefox User Interface Dispatcher Null Pointer Dereference Denial of Service Vulnerability

The following example is available:

• /data/vulnerabilities/exploits/31476.html

Mozilla Firefox User Interface Dispatcher Null Pointer Dereference Denial of Service Vulnerability

Solution:
Reports indicate that the vendor has addressed this issue in Firefox 3.1 prerelease nightly builds. A fixed version of Firefox 3.0.4 will be released in the near future.

Mozilla Firefox User Interface Dispatcher Null Pointer Dereference Denial of Service Vulnerability

References:

• Advisory: Mozilla Firefox User Interface Null Pointer Dereference (Aditya K Sood <[email protected]>)
  
• Mozilla Homepage (Mozilla Foundation)