Multiple Mozilla products is prone to an overflow condition. The utf16_to_isolatin1 function fails to properly sanitize user-supplied input when attempting to convert character sets from unicode to native, resulting in a heap-based buffer overflow. This may allow a context-dependent attacker to execute arbitrary code.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade Firefox or Thunderbird to version 13 or 10.0.5 for ESR, and SeaMonkey to version 2.10 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
