accept no compromises

firefox301-exec.txt

firefox301-exec.txt
Posted Aug 29, 2008
Authored by Beenu Arora | Site beenuarora.com

Firefox version 3.0.1 (final release) suffers from an unspecified remote code execution vulnerability.

tags | advisory, remote, code execution
MD5 | e5305be99ab1f77ca6497f785fd1274e

firefox301-exec.txt

Change Mirror Download

################################################################
# .___ __ _______ .___ #
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #
# \/ \/ \/ #
# ___________ ______ _ __ #
# _/ ___\_ __ \_/ __ \ \/ \/ / #
# \ \___| | \/\ ___/\ / #
# \___ >__| \___ >\/\_/ #
# est.2007 \/ \/ forum.darkc0de.com #
################################################################


Firefox 3.0.1 (final release) Unspecified Remote Code Execution Vulnerability

################################################################
Author: Beenu Arora
Address: www.beenuarora.com
################################################################


#Python Dark Scripts: www.beenuarora.com/work.html

################################################################
#Date Found: 21/08/08
#Severity: High


Operating System : Windows Vista


Successfully exploiting this issue would allow an attacker to execute arbitrary code on an affected computer. Failed attacks will cause denial-of-service conditions.

xul.dll causes an access violation exception (0xC0000005) when trying to write to memory location 0x032785d0 on thread 0

Thread 0 :

Thread 0 - System ID 5768
Entry point 0x00000000
Create time 28-08-2008 20:09:40
Time spent in user mode 0 Days 00:00:38.797
Time spent in kernel mode 0 Days 00:00:28.204

Function Source
0x032785d0
xul!NS_CycleCollectorSuspect_P+1692
xul!NS_CycleCollectorSuspect_P+2a5
xul!NS_CycleCollectorSuspect_P+310
xul!NS_CycleCollectorForget_P+6e
xul!gfxASurface::GetDefaultContextFlags+a568a
xul!NS_GetComponentRegistrar_P+42ea
xul!gfxWindowsNativeDrawing::PaintToContext+39cf5
xul!NS_CycleCollectorSuspect_P+246c2
xul!gfxWindowsPlatform::UpdateFontList+45af
xul!NS_CycleCollectorForget_P+10f37
xul!NS_CycleCollectorForget_P+1189a
xul!gfxFont::~gfxFont+702
xul!gfxWindowsPlatform::ResolveFontName+b1a8
js3250!JS_FinalizeStub+911
nspr4!PR_Unlock+39
xul!gfxASurface::GetDefaultContextFlags+23fa
xul!NS_InvokeByIndex_P+328ad
xul!NS_CycleCollectorForget_P+17925
xul!gfxWindowsFontGroup::GroupFamilyListToArrayList+11a4
xul!NS_CycleCollectorForget_P+22f5a


Module Information

Image Name: C:\Program Files\Mozilla Firefox\xul.dll Symbol Type: Export
Base address: 0x6afc0000 Time Stamp: Wed Jul 02 21:58:44 2008
Checksum: 0x009488a3
COM DLL: False Company Name: Mozilla Foundation
ISAPIExtension: False
ISAPIFilter: False File Version: 1.9.0.1
Managed DLL: False Internal Name: libxul
VB DLL: False Legal Copyright: License: MPL 1.1/GPL 2.0/LGPL 2.1
Loaded Image Name: xul.dll Legal Trademarks: Mozilla
Mapped Image Name:
Module name: xul Private Build:
Single Threaded: False Product Name: Firefox
Module Size: 9.34 MBytes
Symbol File Name: xul.dll


################################################################
______________________________________________________________________________________
|Greetz: D3hydr8,rascal,rsauron,patrick,baltazar,sinner_01 and rest of team memebers. |
|_____________________________________________________________________________________|

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

October 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    15 Files
  • 2
    Oct 2nd
    16 Files
  • 3
    Oct 3rd
    15 Files
  • 4
    Oct 4th
    15 Files
  • 5
    Oct 5th
    11 Files
  • 6
    Oct 6th
    6 Files
  • 7
    Oct 7th
    2 Files
  • 8
    Oct 8th
    1 Files
  • 9
    Oct 9th
    13 Files
  • 10
    Oct 10th
    16 Files
  • 11
    Oct 11th
    15 Files
  • 12
    Oct 12th
    23 Files
  • 13
    Oct 13th
    13 Files
  • 14
    Oct 14th
    12 Files
  • 15
    Oct 15th
    2 Files
  • 16
    Oct 16th
    16 Files
  • 17
    Oct 17th
    16 Files
  • 18
    Oct 18th
    15 Files
  • 19
    Oct 19th
    10 Files
  • 20
    Oct 20th
    7 Files
  • 21
    Oct 21st
    4 Files
  • 22
    Oct 22nd
    2 Files
  • 23
    Oct 23rd
    10 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close