Mozilla JAR File Decompression Heap Overflow (deprecated)
High Nessus Network Monitor Plugin ID 1322
SynopsisThe remote host is vulnerable to a heap overflow.
DescriptionThe remote host is running a version of the Mozilla browser that may contain a heap corruption vulnerability. A vulnerability has been discovered in the JAR URI handler used by Netscape and Mozilla. By constructing a malformed JAR file containing invalid file length information, it is possible to cause heap corruption in a vulnerable browser. When a client attempts to decompress a malicious JAR file, invalid values will be used to allocate buffer space for the inflated data. As there are no checks to prevent this, an overrun condition in the heap may occur if excessive data is decompressed.
SolutionUpgrade to the latest version of Mozilla.