Check Point Advisories

Mozilla Firefox New Function Garbage Collection Code Execution - Ver2 (CVE-2006-3803)

Check Point Reference:	CPAI-2014-0839
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2006-3803
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A code execution vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.