Lucene search

K
mozillaMozilla FoundationMFSA2007-25
HistoryJul 17, 2007 - 12:00 a.m.

XPCNativeWrapper pollution — Mozilla

2007-07-1700:00:00
Mozilla Foundation
www.mozilla.org
8

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.716 High

EPSS

Percentile

98.0%

Mozilla security researchers shutdown and moz_bug_r_a4 reported two separate ways to modify an XPCNativeWrapper such that subsequent access by the browser would result in executing user-supplied code.

CPENameOperatorVersion
firefoxlt2.0.0.5
seamonkeylt1.1.3

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.716 High

EPSS

Percentile

98.0%