Lucene search

K
mozillaMozilla FoundationMFSA2006-73
HistoryDec 19, 2006 - 12:00 a.m.

Mozilla SVG Processing Remote Code Execution — Mozilla

2006-12-1900:00:00
Mozilla Foundation
www.mozilla.org
9

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%

Appending an SVG comment DOM node from one document into another type of document such as HTML in some cases results in a crash due to memory corruption that can be exploited to run arbitrary code.

CPENameOperatorVersion
firefoxlt1.5.0.9
firefoxlt2.0.0.1
seamonkeylt1.0.7

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%