CVE-2009-2043
Firefox 3.0.2-3.0.10 - Denial of Service via TinyMCE Interaction
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-2043. PoCs published by Bret McMillan.
AI-analyzed exploit summary This is a step-by-step writeup describing how to trigger a denial-of-service vulnerability in Mozilla Firefox versions 3.0.2 through 3.0.10 by manipulating a document's HTML content. The exploit involves creating a document, switching to HTML mode, pasting specific content, and reopening the session to cause a crash.
Description
nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to interaction with TinyMCE.
Exploits (1)
This is a step-by-step writeup describing how to trigger a denial-of-service vulnerability in Mozilla Firefox versions 3.0.2 through 3.0.10 by manipulating a document's HTML content. The exploit involves creating a document, switching to HTML mode, pasting specific content, and reopening the session to cause a crash.