Firefox.toString.console.time.Privileged.JavaScript.Injection

Description

This indicates an attack attempt to exploit a Code Injection Vulnerability in Multiple Mozilla product.
The vulnerability is due to an error when the vulnerable software handles a crafted JavaScript. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and be granted admin privileges on the vulnerable application.

Affected Products

Mozilla Firefox 22.0 and prior
Mozilla Thunderbird 17.0.7
Mozilla Firefox ESR 17.0.7
Mozilla Thunderbird ESR 17.0.7

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apple the most recent upgrade or patch from the vendor.
https://www.mozilla.org/security/announce/2013/mfsa2013-69.html

References

https://www.mozilla.org/security/announce/2013/mfsa2013-69.html https://www.mozilla.org/security/announce/2013/mfsa2013-42.html http://www.exploit-db.com/exploits/34363/