vendor:
XPCOM
by:
GulfTech
7,5
CVSS
HIGH
Race Condition
362
CWE
Product Name: XPCOM
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: CVE-2005-2414
CPE: mozilla:xpcom
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: All
2005
XPCOM Race Condition
It is possible for an attacker to create a race condition that will cause an access violation and result in a hard crash of the browser. One way to trigger this issue is by taking a decent sized html file and loading a dom call within some nested divs that will cause part of the page currently being rendered to be deleted. If the page has not loaded by the time the dom call is made then we can delete objects that have yet to be referenced, which will result in a crash as soon as the browser tries to reference the deleted object.
Mitigation:
Mozilla have been aware of this issue for some months, and have fixed the issue on trunk, but not on branch.