Lucene search

K
cve[email protected]CVE-2010-2420
HistoryJun 22, 2010 - 5:30 p.m.

CVE-2010-2420

2010-06-2217:30:01
web.nvd.nist.gov
18
cve-2010-2420
fenrir inc.
activegeckobrowser
sleipnir
web browser
denial of service
arbitrary code
gecko engine
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

Multiple unspecified vulnerabilities in Fenrir Inc. ActiveGeckoBrowser 1.0.0 and 1.0.5 alpha, a module for the Sleipnir web browser, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the Gecko engine.

Affected configurations

NVD
Node
fenrir-incactivegeckobrowserMatch1.0.0
OR
fenrir-incactivegeckobrowserMatch1.0.5alpha
AND
fenrir-incsleipnirMatch2.5.10
OR
fenrir-incsleipnirMatch2.5.11
OR
fenrir-incsleipnirMatch2.5.12
OR
fenrir-incsleipnirMatch2.5.14
OR
fenrir-incsleipnirMatch2.7.2
OR
fenrir-incsleipnirMatch2.8.0
OR
fenrir-incsleipnirMatch2.8.1
OR
fenrir-incsleipnirMatch2.8.2
OR
fenrir-incsleipnirMatch2.8.3

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

Related for CVE-2010-2420