Mozilla.Firefox.InstallTrigger.Install.Method.Code.Execution

Release Date Mar 29, 2011
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt to exploit a memory corruption vulnerability in Mozilla Firefox. This issue is caused by an error in the vulnerable software when handling javascript with misused InstallTrigger.install method. It may allow remote attackers to execute arbitrary code by sending a crafted web page.
Affected Products Mozilla Firefox 1.0.7
Recommended Actions Upgrade to the latest version,available from the web site. http://www.mozilla.com
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2006-1790
Reference/s http://www.securityfocus.com/bid/17516 (BugTraq)

Fortinet