CVE-2009-1232: Input Validation
Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Deploy a network or application-layer filter (WAF/IDS) to detect and drop HTTP(S) payloads containing XML documents composed of a long series of start-tags with no corresponding end-tags (excessive unclosed start-tags). Additionally enforce limits on XML document size and nesting/depth at the perimeter to block inputs that could trigger the memory-corruption denial-of-service affecting Mozilla Firefox 3.0.10 and earlier (including Firefox 3.0.8 and earlier 3.0.x).
- Operational
Identify all installations of Mozilla Firefox 3.0.10 and earlier (this includes Firefox 3.0.8 and earlier 3.0.x). Isolate or restrict network access for those endpoints (for example, prevent access to untrusted web content) until a non-vulnerable Firefox version is available and deployed.
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1232?
CVE-2009-1232 has a severity rating that indicates it can lead to denial of service due to memory corruption in affected Firefox versions.
How do I fix CVE-2009-1232?
To fix CVE-2009-1232, users should upgrade to a version of Mozilla Firefox that is newer than 3.0.10.
Which versions of Firefox are affected by CVE-2009-1232?
CVE-2009-1232 affects Mozilla Firefox versions up to and including 3.0.10.
What type of attack does CVE-2009-1232 represent?
CVE-2009-1232 represents a denial of service attack that can occur when processing malicious XML documents.
Is CVE-2009-1232 a remote vulnerability?
Yes, CVE-2009-1232 is a remote vulnerability that allows attackers to exploit it over a network.