Twenty Year Anniversary

firefox301-exec.txt

firefox301-exec.txt
Posted Aug 29, 2008
Authored by Beenu Arora | Site beenuarora.com

Firefox version 3.0.1 (final release) suffers from an unspecified remote code execution vulnerability.

tags | advisory, remote, code execution
MD5 | e5305be99ab1f77ca6497f785fd1274e

firefox301-exec.txt

Change Mirror Download

################################################################
# .___ __ _______ .___ #
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #
# \/ \/ \/ #
# ___________ ______ _ __ #
# _/ ___\_ __ \_/ __ \ \/ \/ / #
# \ \___| | \/\ ___/\ / #
# \___ >__| \___ >\/\_/ #
# est.2007 \/ \/ forum.darkc0de.com #
################################################################


Firefox 3.0.1 (final release) Unspecified Remote Code Execution Vulnerability

################################################################
Author: Beenu Arora
Address: www.beenuarora.com
################################################################


#Python Dark Scripts: www.beenuarora.com/work.html

################################################################
#Date Found: 21/08/08
#Severity: High


Operating System : Windows Vista


Successfully exploiting this issue would allow an attacker to execute arbitrary code on an affected computer. Failed attacks will cause denial-of-service conditions.

xul.dll causes an access violation exception (0xC0000005) when trying to write to memory location 0x032785d0 on thread 0

Thread 0 :

Thread 0 - System ID 5768
Entry point 0x00000000
Create time 28-08-2008 20:09:40
Time spent in user mode 0 Days 00:00:38.797
Time spent in kernel mode 0 Days 00:00:28.204

Function Source
0x032785d0
xul!NS_CycleCollectorSuspect_P+1692
xul!NS_CycleCollectorSuspect_P+2a5
xul!NS_CycleCollectorSuspect_P+310
xul!NS_CycleCollectorForget_P+6e
xul!gfxASurface::GetDefaultContextFlags+a568a
xul!NS_GetComponentRegistrar_P+42ea
xul!gfxWindowsNativeDrawing::PaintToContext+39cf5
xul!NS_CycleCollectorSuspect_P+246c2
xul!gfxWindowsPlatform::UpdateFontList+45af
xul!NS_CycleCollectorForget_P+10f37
xul!NS_CycleCollectorForget_P+1189a
xul!gfxFont::~gfxFont+702
xul!gfxWindowsPlatform::ResolveFontName+b1a8
js3250!JS_FinalizeStub+911
nspr4!PR_Unlock+39
xul!gfxASurface::GetDefaultContextFlags+23fa
xul!NS_InvokeByIndex_P+328ad
xul!NS_CycleCollectorForget_P+17925
xul!gfxWindowsFontGroup::GroupFamilyListToArrayList+11a4
xul!NS_CycleCollectorForget_P+22f5a


Module Information

Image Name: C:\Program Files\Mozilla Firefox\xul.dll Symbol Type: Export
Base address: 0x6afc0000 Time Stamp: Wed Jul 02 21:58:44 2008
Checksum: 0x009488a3
COM DLL: False Company Name: Mozilla Foundation
ISAPIExtension: False
ISAPIFilter: False File Version: 1.9.0.1
Managed DLL: False Internal Name: libxul
VB DLL: False Legal Copyright: License: MPL 1.1/GPL 2.0/LGPL 2.1
Loaded Image Name: xul.dll Legal Trademarks: Mozilla
Mapped Image Name:
Module name: xul Private Build:
Single Threaded: False Product Name: Firefox
Module Size: 9.34 MBytes
Symbol File Name: xul.dll


################################################################
______________________________________________________________________________________
|Greetz: D3hydr8,rascal,rsauron,patrick,baltazar,sinner_01 and rest of team memebers. |
|_____________________________________________________________________________________|

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

September 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    1 Files
  • 2
    Sep 2nd
    3 Files
  • 3
    Sep 3rd
    15 Files
  • 4
    Sep 4th
    15 Files
  • 5
    Sep 5th
    18 Files
  • 6
    Sep 6th
    18 Files
  • 7
    Sep 7th
    15 Files
  • 8
    Sep 8th
    2 Files
  • 9
    Sep 9th
    2 Files
  • 10
    Sep 10th
    16 Files
  • 11
    Sep 11th
    17 Files
  • 12
    Sep 12th
    15 Files
  • 13
    Sep 13th
    29 Files
  • 14
    Sep 14th
    21 Files
  • 15
    Sep 15th
    3 Files
  • 16
    Sep 16th
    1 Files
  • 17
    Sep 17th
    15 Files
  • 18
    Sep 18th
    16 Files
  • 19
    Sep 19th
    29 Files
  • 20
    Sep 20th
    18 Files
  • 21
    Sep 21st
    1 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close