Mozilla.Firefox.XBL.Code.Execution

Release Date Aug 24, 2006
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a remote code execution vulnerability in Mozilla Firefox. The vulnerability is caused by an error when the vulnerable software handles a specially crafted eval in an XBL method binding (XBL.method.eval). It allows a remote attacker to execute arbitrary code.
Affected Products Mozilla Firefox versions 1.5.0.1 and previous versions Mozilla Firefox versions 1.0.7 and previous versions
Recommended Actions Update to the latest versions: http://www.mozilla.com/firefox/
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2006-1735
Reference/s http://www.frsirt.com/english/advisories/2006/1356 (FrSIRT) http://www.securityfocus.com/bid/17516 (BugTraq)

Fortinet