Vulnerability in FireFox 3.5.1 confirmed, exploit PoC, no patch

[Corrine]

Various analysts and sites have recently confirmed a vulnerability is present in FireFox 3.5.1 that has had exploit PoC released. When exploited, the vulnerability can lead to system compromise or induce a DOS. No Patch is available.

http://isc.sans.org/diary.html?storyid=6829

[Eric the Red]

Will it or won't it?

There is much discussion about this report, the Mozilla Blog is a good starting point if you are interested:

http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/

[Aaron Hulett]

At a minimum, it's able to perform a DoS on the browser.  That part isn't in argument.

[Eric the Red]

Indeed. What has not been confirmed is that the condition can lead to a system compromise.