{"uuid": "728977de-d5cc-4475-96de-60c69242a460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-2477", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_escape_retval.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Simon Berry-Byrne \", \"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a memory corruption vulnerability in the Mozilla\\n          Firefox browser. This flaw occurs when a bug in the javascript interpreter\\n          fails to preserve the return value of the escape() function and results in\\n          uninitialized memory being used instead. This module has only been tested\\n          on Windows, but should work on other platforms as well with the current\\n          targets.\", \"disclosure_date\": \"2009-07-13\", \"fullname\": \"exploit/multi/browser/firefox_escape_retval\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Firefox 3.5 escape() Return Value Memory Corruption\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_escape_retval.rb\", \"platform\": \"OSX,Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"multi/browser/firefox_escape_retval\", \"references\": [\"CVE-2009-2477\", \"OSVDB-55846\", \"BID-35660\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=503286\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Firefox 3.5.0 on Windows XP SP0-SP3\", \"Firefox 3.5.0 on Mac OS X 10.5.7 (Intel)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.352849Z"}