CVE-2009-1044: Critical severity Mozilla Firefox vulnerability
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
Which systems are specifically identified as affected?
The reported affected configuration is Mozilla Firefox 3.0.7 running on Windows 7. No other Firefox versions or operating systems are identified in the provided data.
What does an attacker need to exploit this issue?
The issue is remotely exploitable without authentication. The attack complexity is rated medium, but the provided information does not identify the specific delivery mechanism beyond unknown vectors involving the _moveToEdgeShift XUL tree method.
What is the impact of successful exploitation?
A remote attacker can execute arbitrary code. The severity vector indicates complete compromise of confidentiality, integrity, and availability.
Is a fix available?
Yes. A patch is available, though the provided data does not specify the patch version or deployment instructions.