Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-2752. PoCs published by Abysssec.
AI-analyzed exploit summary This exploit generates a malicious CSS file that triggers a heap overflow in Mozilla Firefox via a specially crafted @font-face rule with excessive URL references. The vulnerability allows remote code execution due to improper memory handling in the font parsing logic.
Description
Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
Exploits (1)
This exploit generates a malicious CSS file that triggers a heap overflow in Mozilla Firefox via a specially crafted @font-face rule with excessive URL references. The vulnerability allows remote code execution due to improper memory handling in the font parsing logic.