Mozilla Firefox CSSValue Array Data Structure Remote Code Execution Vulnerability

Threat level definition

Mozilla Firefox CSSValue Array Data Structure Remote Code Execution Vulnerability

References:

Firefox Homepage (Mozilla Foundation)
Mozilla Firefox 3.0 Vulnerability (Zero Day Initiative)
New Security Issue Under Investigation (Mozilla Foundation)
ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability (zdi-disclosures@3com.com)
ASA-2008-315 seamonkey security update (RHSA-2008-0599) (Avaya)
ASA-2008-316 firefox security update (RHSA-2008-0598) (Avaya)
ASA-2009-158 - Multiple Security Vulnerabilities in Firefox Versions Before 2.0. (Avaya)
MFSA 2008-34 Mozilla Foundation Security Advisory 2008-34 (Mozilla)
MozillaFirefox 20080717 (Novell)
Nortel Response to Sun Alert 256408 - Solaris 10 - Vulnerabilities in Firefox Ma (Nortel Networks)
RHSA-2008:0597-6 Critical: firefox security update (Red Hat)
RHSA-2008:0598-3 Critical: firefox security update (Red Hat)
RHSA-2008:0599-5 Critical: seamonkey security update (Red Hat)
RHSA-2008:0616-9: Moderate: thunderbird security update (Red Hat)
Solution 256408: Multiple Security Vulnerabilities in Firefox (Sun)
ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption (Zero Day Initiative)

Privacy Statement
Copyright 2008, SecurityFocus