[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability

ID: oval:org.mitre.oval:def:5928Date: (C)2009-09-23   (M)2017-10-04
Class: VULNERABILITYFamily: windows




Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1) a META element specifying automatic page refresh or (2) a JavaScript onLoad event handler for a BODY element. NOTE: it was later reported that earlier versions are also affected.

Platform:
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows 10
Product:
Mozilla Firefox
Reference:
CVE-2009-1828
CVE    1
CVE-2009-1828
CPE    2
cpe:/a:mozilla:firefox:3.0.10
cpe:/a:mozilla:firefox:::x86

© 2013 SecPod Technologies