Mozilla Firefox 'OnStartRequest()' NULL Pointer Dereference Denial Of Service Vulnerability

Bugtraq ID:	50667
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 14 2011 12:00AM
Updated:	Nov 14 2011 12:00AM
Credit:	0in
Vulnerable:	Mozilla Firefox 8.0 Mozilla Firefox 7.0.1 Mozilla Firefox 7.0 Mozilla Firefox 7 Mozilla Firefox 6.0.2 Mozilla Firefox 6.0.1 Mozilla Firefox 6.0 Mozilla Firefox 6 Mozilla Firefox 5.0.1 Mozilla Firefox 5.0 Mozilla Firefox 4.0.1 Mozilla Firefox 4.0
Not Vulnerable:

Mozilla Firefox 'OnStartRequest()' NULL Pointer Dereference Denial Of Service Vulnerability

Mozilla Firefox is prone to a denial-of-service vulnerability because of a NULL-pointer dereference.

Successful exploits may allow remote attackers to cause denial-of-service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Mozilla Firefox 'OnStartRequest()' NULL Pointer Dereference Denial Of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/50667.html

Mozilla Firefox 'OnStartRequest()' NULL Pointer Dereference Denial Of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at:[email protected].

Mozilla Firefox 'OnStartRequest()' NULL Pointer Dereference Denial Of Service Vulnerability

References:

• Cisco NX-OS Software TACACS+ Command Authorization Vulnerability (Cisco)