CVE-2011-3658
Mozilla Firefox <8.0, Thunderbird <8.0, SeaMonkey <2.5 - DoS
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-3658.
PoCs published by Metasploit, regenrecht, including Metasploit module exploits/windows/browser/mozilla_nssvgvalue.
AI-analyzed exploit summary This is a Metasploit module exploiting an out-of-bounds access vulnerability in Firefox 7/8 (<= 8.0.1) via the nsSVGValue observer mechanism. It achieves remote code execution by manipulating memory layout and leveraging ROP chains.
Description
The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
Exploits (2)
This is a Metasploit module exploiting an out-of-bounds access vulnerability in Firefox 7/8 (<= 8.0.1) via the nsSVGValue observer mechanism. It achieves remote code execution by manipulating memory layout and leveraging ROP chains.
This Metasploit module exploits an out-of-bounds access vulnerability in Firefox 7 and 8 (<= 8.0.1) via the nsSVGValue observer notification mechanism, allowing remote code execution through memory corruption and ROP chains.