EIP-2026-103579

PRE-CVE

Mozilla0.x / Netscape 3/4 / Firefox 1.0 - JavaScript IFRAME Rendering Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103579. PoCs published by Niek van der Maas.

AI-analyzed exploit summary This exploit triggers a NULL pointer dereference in Mozilla/Netscape and Firefox browsers by attempting to print an IFRAME via JavaScript, resulting in a denial of service (crash). The PoC is minimal and directly demonstrates the vulnerability.

Description

Mozilla0.x / Netscape 3/4 / Firefox 1.0 - JavaScript IFRAME Rendering Denial of Service

Exploits (1)

exploitdb WORKING POC VERIFIED
by Niek van der Maas · textdosmultiple
https://www.exploit-db.com/exploits/24799

This exploit triggers a NULL pointer dereference in Mozilla/Netscape and Firefox browsers by attempting to print an IFRAME via JavaScript, resulting in a denial of service (crash). The PoC is minimal and directly demonstrates the vulnerability.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Mozilla/Netscape and Firefox browsers (versions affected by CVE-2026-103577)
No auth needed
Prerequisites: Victim must visit a malicious webpage or have the exploit code injected into a trusted page
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026