Lucene search

K
cve[email protected]CVE-2010-1198
HistoryJun 24, 2010 - 12:30 p.m.

CVE-2010-1198

2010-06-2412:30:00
CWE-399
web.nvd.nist.gov
48
cve-2010-1198
mozilla firefox
seamonkey
use-after-free vulnerability
remote code execution

9.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.182 Low

EPSS

Percentile

96.1%

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

References

9.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.182 Low

EPSS

Percentile

96.1%