Description
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."
References
- 20071020 [ELEYTT] Public Advisory 20-10-2007 mailing-list
- firefox-parseftplist-dos(37334) vdb-entry
- 26159 vdb-entry
- http://www.eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf
- 43609 vdb-entry
- 3319 third-party-advisory