Bug 240592 – www-client/mozilla-firefox<=3.0.3 user interface event dispatcher DOS (CVE-2008-4324)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Stefan Behte (RETIRED) 2008-10-08 21:15:47 UTC]

CVE-2008-4324 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4324):
  The user interface event dispatcher in Mozilla Firefox 3.0.3 on
  Windows XP SP2 allows remote attackers to cause a denial of service
  (NULL pointer dereference and application crash) via a series of
  keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup
  events.  NOTE: it was later reported that Firefox 3.0.2 on Mac OS X
  10.5 is also affected.

[Comment 1 Stefan Behte (RETIRED) 2008-10-08 21:20:09 UTC]

Confimed to work on 3.0.3!
I'm not sure if this also could be A2 (remote code exec): http://www.securityfocus.com/bid/31476/discuss

[Comment 2 Stefan Behte (RETIRED) 2008-10-08 21:26:34 UTC]

3.0.1-r1 crashes (just closes) after freezing for about 5 seconds.

[Comment 3 Robert Buchholz (RETIRED) 2008-10-08 21:31:37 UTC]

If it only affects the 3.x firefoxes, it should be ~ rated, and severity changed.

[Comment 4 Stefan Behte (RETIRED) 2008-10-09 14:25:24 UTC]

I tested 2.0.0.17 now, the exploit does not do anything to it, so I'm changing it.

They do not mention it here:
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html

Upstream release plan for 3.0.4:
https://wiki.mozilla.org/Releases/Firefox_3.0.4

I'll ask.

[Comment 5 Stefan Behte (RETIRED) 2008-10-09 15:12:35 UTC]

https://bugzilla.mozilla.org/show_bug.cgi?id=454820

[Comment 6 Stefan Behte (RETIRED) 2008-11-07 20:59:08 UTC]

There is a fix available, please provide an ebuild.

[Comment 7 Stefan Behte (RETIRED) 2008-11-30 17:03:58 UTC]

3.0.4 in tree, closing noglsa.