SID 1:29579

Rule Category

BROWSER-FIREFOX -- Snort has detected traffic known to exploit vulnerabilities present in the Firefox browser, or products that have the "Gecko" engine (Thunderbird email client, etc.).

Alert Message

BROWSER-FIREFOX Mozilla Firefox browser engine memory corruption attempt

Rule Explanation

This event is generated when an attempt to exploit a memory corruption in Mozilla Firefox, version 3.0 through 3.0.14, is detected Impact: Attempted User Privilege Gain Details: This vulnerability is present in the browser engine in Mozilla Firefox 3.0.1 before 3.0.15. The browser does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Ease of Attack: High

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group