Mozilla Firefox 'designMode' Null Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	33154
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0071
Remote:	Yes
Local:	No
Published:	Sep 24 2008 12:00AM
Updated:	Apr 06 2009 01:46PM
Credit:	SkyLined
Vulnerable:	Pardus Linux 2008 0 Mozilla Firefox 3.0.8 Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.6 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.2 Mozilla Firefox 3.0.1 Mozilla Firefox 3.0
Not Vulnerable:

Mozilla Firefox 'designMode' Null Pointer Dereference Denial of Service Vulnerability

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.

Firefox 3.0.5, 3.0.6, 3.0.7, and 3.0.8 are vulnerable; other versions may also be affected.

Mozilla Firefox 'designMode' Null Pointer Dereference Denial of Service Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/33154.html
• /data/vulnerabilities/exploits/33154-2.html

Mozilla Firefox 'designMode' Null Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Mozilla Firefox 'designMode' Null Pointer Dereference Denial of Service Vulnerability

References:

• Bug 456727 - document designMode on, replace/delete HTML tag, queryCommand*('b (SkyLined)
  
• Firefox305RemoteDoS.htm (carl hardwick)
  
• Mozilla Homepage (Mozilla Foundation)