Exploitation Summary
EIP tracks 3 public exploits for CVE-2011-0073.
PoCs published by Metasploit, Abysssec, regenrecht, xero, including Metasploit module exploits/windows/browser/mozilla_nstreerange.
AI-analyzed exploit summary This Metasploit module exploits a dangling pointer vulnerability in Mozilla Firefox (CVE-2011-0073) by manipulating the nsTreeRange object to achieve remote code execution. It bypasses DEP without ROP but relies on Java or is limited by ASLR on non-XP systems.
Description
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Exploits (3)
This Metasploit module exploits a dangling pointer vulnerability in Mozilla Firefox (CVE-2011-0073) by manipulating the nsTreeRange object to achieve remote code execution. It bypasses DEP without ROP but relies on Java or is limited by ASLR on non-XP systems.
This exploit targets a use-after-free vulnerability in Mozilla Firefox <= 3.6.16 via the nsTreeSelection element. It leverages a Java ROP chain to bypass DEP/ASLR on Windows 7, achieving remote code execution.
This Metasploit module exploits a dangling pointer vulnerability in Mozilla Firefox's nsTreeRange object, allowing remote code execution by manipulating heap memory and bypassing DEP without ROP. It targets Firefox 3.5.x to 3.6.16 on Windows, leveraging Java or ASLR bypass techniques.