Lucene search

K
mozillaMozilla FoundationMFSA2006-71
HistoryDec 19, 2006 - 12:00 a.m.

LiveConnect crash finalizing JS objects — Mozilla

2006-12-1900:00:00
Mozilla Foundation
www.mozilla.org
11

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.539 Medium

EPSS

Percentile

97.6%

Steven Michaud reported a crash in LiveConnect, the bridge code that allows Java applets and web JavaScript to communicate. The crash is due to re-use of an already-freed object and we presume this could be exploited with enough effort.

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.539 Medium

EPSS

Percentile

97.6%