EIP-2026-104619

This exploit leverages a heap spray technique to execute arbitrary shellcode in Firefox 3.5 on OS X, delivering a bind shell on port 4444. It uses JavaScript to spray the heap and trigger the vulnerability via malformed HTML content.