Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-1r4s-89nj-wbb6 |
|---|
| Summary | Calling the QueryInterface method of the built-in
Location and Navigator objects causes memory corruption
that might be exploitable to run arbitrary code.This flaw appears to have been introduced during development
of Firefox 1.5/SeaMonkey 1.0 -- Firefox 1.0 and the older
Mozilla Suite 1.7 do not appear to be vulnerable.Thunderbird 1.5 could be vulnerable if JavaScript is
enabled in mail. This is not the default setting and we strongly
discourage users from turning on JavaScript in mail. Thunderbird
is not vulnerable in its default configuration.Update (7 February 2006)
H D Moore of the Metasploit Project published a working exploit on milw0rm
for the Linux and Mac OS X versions of Firefox 1.5. Severity upgraded
to critical.Update (13 April 2006)
This flaw has been fixed in Thunderbird 1.5.0.2 |
|---|
| Aliases |
|
|---|
| Fixed_packages |
|
|---|
| Affected_packages |
|
|---|
| References |
|
|---|
| Weaknesses |
|
|---|
| Exploits |
| 0 |
| date_added |
2006-02-07 |
| description |
Mozilla Firefox 1.5 (OSX) - 'location.QueryInterface()' Code Execution (Metasploit) |
| required_action |
null |
| due_date |
null |
| notes |
null |
| known_ransomware_campaign_use |
true |
| source_date_published |
2006-02-08 |
| exploit_type |
remote |
| platform |
osx |
| source_date_updated |
2016-10-30 |
| data_source |
Exploit-DB |
| source_url |
|
|
| 1 |
| date_added |
null |
| description |
This module exploits a code execution vulnerability in the Mozilla
Firefox browser. To reliably exploit this vulnerability, we need to fill
almost a gigabyte of memory with our nop sled and payload. This module has
been tested on OS X 10.3 with the stock Firefox 1.5.0 package. |
| required_action |
null |
| due_date |
null |
| notes |
Reliability:
- unknown-reliability
Stability:
- unknown-stability
SideEffects:
- unknown-side-effects
|
| known_ransomware_campaign_use |
false |
| source_date_published |
2006-02-02 |
| exploit_type |
null |
| platform |
Linux,OSX |
| source_date_updated |
null |
| data_source |
Metasploit |
| source_url |
https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/browser/firefox_queryinterface.rb |
|
|
|---|
| Severity_range_score | 9.0 - 10.0 |
|---|
| Exploitability | null |
|---|
| Weighted_severity | null |
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-1r4s-89nj-wbb6 |
|---|