Intrusion Prevention

Mozilla.Firefox.rdf.File.Handling.Memory.Corruption

Description

This indicates an attack attempt to exploit a memory corruption vulnerability in Mozilla Firefox.
The vulnerability is a result of the application's failure to properly handle multiple "rdf" file loading in an "xul" tree element. Attackers could exploit it to execute arbitrary code.

Affected Products

Mozilla Firefox prior to 3.5
Mozilla Firefox prior to 3.0.12

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Upgrade to the following versions or higher.
Mozilla Firefox 3.5
Mozilla Firefox 3.0.12

CVE References

CVE-2009-2464