Lucene search

K
mozillaMozilla FoundationMFSA2006-06
HistoryFeb 01, 2006 - 12:00 a.m.

Integer overflows in E4X, SVG, and Canvas — Mozilla

2006-02-0100:00:00
Mozilla Foundation
www.mozilla.org
6

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.939 High

EPSS

Percentile

99.1%

Georgi Guninski reports integer overflows in the new E4X, SVG, and Canvas features. These lead to memory corruption that is potentially exploitable to run arbitrary code.

CPENameOperatorVersion
firefoxlt1.5.0.1
seamonkeylt1
thunderbirdlt1.5.0.2

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.939 High

EPSS

Percentile

99.1%