Intrusion PreventionMozilla.Firefox.URLBar.Null.Byte.File.Code.Execution
Description
This indicates an attack attempt to exploit a remote file Code Execution vulnerability in Mozilla Firefox.
The vulnerability is due to insufficient sanitizing of user supplied inputs in Firefox when running on Windows. An attacker can trick an unsuspecting victim into visiting a malicious website and then execute arbitrary code within the context of the application.
Affected Products
Mozilla Firefox 2.0.0.5 and earlier versions.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to the latest version available from the website.
http://www.mozilla.com/en-US/firefox/new/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 28994 |
| Created | Sep 09, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-3285 |
| Exploit Prediction Score | 1.49% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Mozilla |