Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability

Bugtraq ID:	35132
Class:	Design Error
CVE:	CVE-2009-1828
Remote:	Yes
Local:	No
Published:	May 28 2009 12:00AM
Updated:	Jul 09 2009 08:36PM
Credit:	Thierry Zoller
Vulnerable:	Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.10 Mozilla Firefox 3.1 Beta 3 Mozilla Firefox 3.1 Beta 2 Mozilla Firefox 3.1 Beta 1
Not Vulnerable:

Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to cause the browser to stop responding, thus denying service to legitimate users.

Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/35132.html

Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability

References:

• Mozilla Homepage (Mozilla Foundation)
  
• TZO-27-2009] - Firefox Denial of Service (KEYGEN) (Thierry Zoller)
  
• Update: [TZO-27-2009] Firefox Denial of Service (Keygen) (Thierry Zoller)
  
• [TZO-27-2009] Firefox Denial of Service (Keygen) (Thierry Zoller )
  
• Update: [TZO-27-2009] Firefox Denial of Service (Keygen) (Thierry Zoller )