Detections
Analytics
FreeBSD : mozilla -- corrupt JIT state after deep return from native function (c1ef9b33-72a6-11de-82ea-0030843d3802)
high Nessus Plugin ID 39867
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Mozilla Project reports :Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape(), the Just-in-Time (JIT) compiler could get into a corrupt state. This could be exploited by an attacker to run arbitrary code such as installing malware.
This vulnerability does not affect earlier versions of Firefox which do not support the JIT feature.
Solution
Update the affected package.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2009-41/
Plugin Details
Severity: High
ID: 39867
File Name: freebsd_pkg_c1ef9b3372a611de82ea0030843d3802.nasl
Version: 1.26
Type: local
Family: FreeBSD Local Security Checks
Published: 7/20/2009
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:firefox, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/17/2009
Vulnerability Publication Date: 7/16/2009
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Firefox 3.5 escape() Return Value Memory Corruption)
Reference Information
CVE: CVE-2009-2477