Release DateJan 05, 2010 |
Severitycritical |
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems. |
DescriptionThis indicates an attack attempt against a code-execution vulnerability in Mozilla Firefox.The vulnerability is caused by an error when the vulnerable software handles malcious Javascript. It allows a remote attacker to execute arbitrary code via sending a crafted web page. |
Affected ProductsMozilla Firefox 3.5.x before 3.5.4 |
Recommended ActionsUpgrade to the latest version Firefox 3.5.4. |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2009-3371 |
Reference/shttp://www.mozilla.org/security/announce/2009/mfsa2009-54.html |