Mozilla.Firefox.Floating.Point.Number.Memory.Corruption

Release Date Dec 15, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a memory corruption vulnerability in Mozilla Firefox Browser. The vulnerability is caused by a boundary error when the vulnerable software handles a very long floating point number. It allows a remote attacker to execute arbitrary code.
Affected Products Mozilla Firefox 3.5.3 and previous versions
Recommended Actions Update to the latest versions: http://www.firefox.com/
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1563
Reference/s http://www.mozilla.org/security/announce/2009/mfsa2009-59.html http://www.securityfocus.com/bid/36851 (BugTraq)

Fortinet