Lucene search

K
mozillaMozilla FoundationMFSA2008-45
HistorySep 23, 2008 - 12:00 a.m.

XBM image uninitialized memory reading — Mozilla

2008-09-2300:00:00
Mozilla Foundation
www.mozilla.org
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.025 Low

EPSS

Percentile

90.0%

Security researcher Billy Hoffman discovered a bug in the XBM decoder that allowed random small chunks of uninitialized memory to be read. The severity of this bug was low and did not appear to cause any memory corruption.

CPENameOperatorVersion
firefoxlt2.0.0.17
seamonkeylt1.1.12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.025 Low

EPSS

Percentile

90.0%