CVE-2011-2371
SeaMonkey through 2.0.14 - Remote Code Execution via Array.reduceRight Integer Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2011-2371.
PoCs published by Metasploit, ryujin, pa_kt, including Metasploit module exploits/windows/browser/mozilla_reduceright.
AI-analyzed exploit summary This exploit targets a vulnerability in Mozilla Firefox 3.6.16/17 where an integer overflow in the Array.reduceRight() method allows arbitrary code execution. It uses a heap spray technique and ROP chain to achieve remote code execution.
Description
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
Exploits (4)
This exploit targets a vulnerability in Mozilla Firefox 3.6.16/17 where an integer overflow in the Array.reduceRight() method allows arbitrary code execution. It uses a heap spray technique and ROP chain to achieve remote code execution.
This exploit leverages an integer overflow in Mozilla Firefox's Array.reduceRight() method (CVE-2011-2371) to achieve remote code execution. It uses heap spraying and a ROP chain to bypass DEP/ASLR, targeting Firefox 3.6.16/3.6.17 on Windows 7.
This is a working proof-of-concept exploit for CVE-2011-2371, targeting a use-after-free vulnerability in Firefox 4.0.1. It leverages heap spraying and ROP chains to achieve arbitrary code execution, specifically using a message box shellcode.
This Metasploit module exploits CVE-2011-2371, an integer overflow in Mozilla Firefox 3.6's Array.reduceRight() method, leading to arbitrary code execution. It uses heap spraying and ROP chains to bypass ASLR and DEP, targeting specific Firefox versions on Windows.