548037 - Mozilla Firefox Unspecified Code Execution Vulnerability

Status: RESOLVED INCOMPLETE

(Firefox :: Security, defect)

Description

[sean hamilton]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6

A vulnerability has been reported in Mozilla Firefox, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error and can be exploited to execute arbitrary code.

The vulnerability is reported in version 3.6. Other versions may also be affected.


Reproducible: Always



Expected Results:  
create a security patch

using secunia software inspector shows that mozilla firefox is insecure

Comment 1

[sean hamilton]

create a patch as soon as possible

Comment 2

[Daniel Veditz [:dveditz]]

Doesn't need to be hidden, the claim of a 0-day is already public.

No more information here than we're getting in the press, and still not enough to fix this phantom alleged problem. Would love to see some proof of these claims.

Comment 3

[Daniel Veditz [:dveditz]]

(In reply to comment #0)
> using secunia software inspector shows that mozilla firefox is insecure

Do you know what the inspector is doing? if it's just saying (does version == 3.6?) that's useless, but if it's actually testing something maybe we can reverse engineer the problem out of it. (Secunia wouldn't tell us what the flaw was, referred us back to the original reporter who has not responded.)