CVE-2009-2953
Mozilla Firefox 3.0.6-3.0.13 and 3.5.x - Denial of Service via Long Location Hash
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-2953. PoCs published by Jeremy Brown.
AI-analyzed exploit summary This Perl script generates an HTML file that exploits a denial-of-service vulnerability in Mozilla Firefox 3.0.5 by setting an excessively long string to location.hash, causing a crash.
Description
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.
Exploits (1)
This Perl script generates an HTML file that exploits a denial-of-service vulnerability in Mozilla Firefox 3.0.5 by setting an excessively long string to location.hash, causing a crash.