Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-1214. PoCs published by Abysssec, J23.
AI-analyzed exploit summary This exploit generates an HTML file with a malicious Java applet that triggers a heap overflow in Firefox 3.6.4 via excessive PARAM elements, leading to remote code execution. The vulnerability is in the EnsureCachedAttrParamArrays function.
Description
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
Exploits (2)
This exploit generates an HTML file with a malicious Java applet that triggers a heap overflow in Firefox 3.6.4 via excessive PARAM elements, leading to remote code execution. The vulnerability is in the EnsureCachedAttrParamArrays function.
This is a vulnerability writeup for CVE-2020-1214, describing a buffer overflow in Mozilla Firefox and SeaMonkey. It lacks exploit code but provides details on affected versions and fixes.