CVE-2011-0065
Mozilla Firefox <3.5.19 & SeaMonkey <2.0.14 - Use After Free
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2011-0065.
PoCs published by Metasploit, mr_me, Rh0, including Metasploit module exploits/windows/browser/mozilla_mchannel.
AI-analyzed exploit summary This Metasploit module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16 on Mac OS X by manipulating the mChannel object via the nsIChannelEventSink interface, leading to arbitrary code execution.
Description
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
Exploits (6)
This Metasploit module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16 on Mac OS X by manipulating the mChannel object via the nsIChannelEventSink interface, leading to arbitrary code execution.
This exploit targets a use-after-free vulnerability in Mozilla's mChannel Object (CVE-2011-0065) via a heap spray and ROP chain to achieve remote code execution. It leverages Java applet interaction and JavaScript to trigger the vulnerability and execute shellcode.
This Metasploit module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16 via the mChannel object, using heap spraying and a minimal ROP chain to bypass DEP on Windows XP SP3.
This Metasploit module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16 via the mChannel object, using heap spraying and a minimal ROP chain to bypass DEP on Windows XP SP3.
This Metasploit module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16 via the mChannel object, leveraging heap spraying and ROP chains to bypass DEP on Windows XP SP3 and ASLR on Windows 7 with Java 6 or below.
This Metasploit module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16 on Mac OS X. It leverages the mChannel object to achieve remote code execution via a crafted HTML page with embedded JavaScript.