Intrusion PreventionMozilla.Firefox.Simultaneous.XPCOM.Event.Memory.Corruption
Description
This indicates an attck attempt against a memory-corruption vulnerability in Mozilla Firefox.
The vulnerability is due to a memory corruption error within the handling of simultaneously happening XPCOM events resulting in the use of a deleted timer object. An attacker can exploit this issue to execute arbitrary code.
Affected Products
Mozilla Firefox 1.5 before 1.5.0.5
Thunderbird before 1.5.0.5
SeaMonkey before 1.0.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to the latest version, available from the vendor's web site:
http://www.mozilla.com/en-US/products/download.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17951 |
| Created | Mar 10, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-3113 |
| Exploit Prediction Score | 96.86% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Mozilla |