Lucene search

K
cve[email protected]CVE-2010-1203
HistoryJun 24, 2010 - 12:30 p.m.

CVE-2010-1203

2010-06-2412:30:00
NVD-CWE-noinfo
web.nvd.nist.gov
40
javascript engine
mozilla firefox
denial of service
remote attack
cve-2010-1203

9.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.11 Low

EPSS

Percentile

95.1%

The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.

References

9.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.11 Low

EPSS

Percentile

95.1%