A vulnerability has been identified in Mozilla Firefox, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a memory corruption error in "nsTextFrame::ClearTextRun()" when processing certain data, which could be exploited by attackers to crash an affected browser or execute arbitrary code by tricking a user into visiting a malicious web page.

Affected Products

Mozilla Firefox version 3.0.9

Solution

Upgrade to Mozilla Firefox version 3.0.10 :
http://www.mozilla.org/projects/firefox/

References

http://www.vupen.com/english/advisories/2009/1180
http://www.mozilla.org/security/announce/2009/mfsa2009-23.html

In-depth Binary Analysis

Available in customer area as part of VUPEN Binary Analysis & Exploits Service and VUPEN Vulnerability Notification Service Ultimate Feed Edition.
 

Private Exploit or PoC

Available in customer area as part of VUPEN Binary Analysis & Exploits Service and VUPEN Vulnerability Notification Service Ultimate Feed Edition.
 

Credits

Vulnerability reported by Marc Gueury and Daniel Veditz.

Changelog

2009-04-28 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.