Mozilla.Firefox.tree.Object.Removal.Code.Execution

Description

This indicates an attack attempt to exploit a memory-corruption vulnerability in Mozilla Firefox.
The vulnerability is caused by an error that occurs when the vulnerable software handles misused XUL tree objects. A remote attacker may exploit this to execute arbitrary code via a crafted web page.

Affected Products

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's web site for the suggested workaround:
http://www.mozilla.org/security/announce/2010/mfsa2010-55.html

References