Firefox, Mozilla, Netscape Critical Vulnerability
- 0
- Add a Comment
“The vulnerability is caused due to an error in the handling of an URL that contains the 0xAD character in its domain name. This can be exploited to cause a heap-based buffer overflow.
Successful exploitation crashes Firefox [and these other browsers] and may potentially allow code execution but requires that the user is tricked into visiting a malicious web site or open a specially crafted HTML file.”
Bottom line is don’t browse untrusted websites until they release a fix.
Firefox IDN URL Domain Name Buffer Overflow
Mozilla URL Domain Name Buffer Overflow
Netscape 8.x, 7.x URL Domain Name Buffer Overflow
