Check Point Advisories

Mozilla Firefox Style Engine Position Change Memory Corruption - Ver2 (CVE-2006-0294)

Check Point Reference:	CPAI-2014-0804
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2006-0294
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A memory corruption vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by changing an element's style from position:relative to position:static which causes Gecko to operate on freed memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.