CVE-2005-2265
Firefox < 1.0.5 and Mozilla < 1.7.9 - Denial of Service via InstallVersion.compareTo
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-2265.
PoCs published by Metasploit, H D Moore, hdm, including Metasploit module exploits/multi/browser/mozilla_compareto.
AI-analyzed exploit summary This exploit targets a code execution vulnerability in Mozilla Suite/Firefox via a heap spray and manipulation of the InstallVersion.compareTo() method. It leverages JavaScript to trigger memory corruption and execute arbitrary payloads on vulnerable Windows systems.
Description
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.
Exploits (3)
This exploit targets a code execution vulnerability in Mozilla Suite/Firefox via a heap spray and manipulation of the InstallVersion.compareTo() method. It leverages JavaScript to trigger memory corruption and execute arbitrary payloads on vulnerable Windows systems.
This exploit leverages a heap spray technique to execute arbitrary code in Mozilla Suite/Firefox by exploiting a vulnerability in the InstallVersion->compareTo() method. It targets Windows systems with Firefox versions prior to 1.0.5.
This Metasploit module exploits a code execution vulnerability in Mozilla Suite/Firefox via a heap spray and JavaScript manipulation of the `compareTo()` method. It targets a memory corruption issue (CVE-2005-2265) to achieve remote code execution.