Mozilla Firefox RegExp remote Integer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Mozilla Firefox 3.x
Unaffected system:
Mozilla Firefox 3.6.23
Mozilla Firefox 3.6.23
Description:
--------------------------------------------------------------------------------
Bugtraq id: 49809

Firefox is a very popular open-source WEB browser.

An integer overflow error occurs when Firefox processes large JavaScript RegExp expressions. Remote attackers can execute arbitrary code with the current user permission in the affected applications, resulting in DOS.

<* Source: Mark Kaplan

Link: http://www.mozilla.org/security/announce/2011/mfsa2011-40.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Mozilla
-------
Mozilla has released a Security Bulletin (mfsa2011-37) and patches for this:

Mfsa2011-37: Integer underflow when using JavaScript RegExp

Link: http://www.mozilla.org/security/announce/2011/mfsa2011-37.html