Lucene search

Mozilla FoundationMFSA2010-58

HistorySep 07, 2010 - 12:00 a.m.

Crash on Mac using fuzzed font in data: URL — Mozilla

2010-09-0700:00:00

Mozilla Foundation

www.mozilla.org

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

JSON

Security researcher Marc Schoenefeld reported that a specially crafted font could be applied to a document and cause a crash on Mac systems. The crash showed signs of memory corruption and presumably could be used by an attacker to execute arbitrary code on a victim’s computer.

CPENameOperatorVersion
firefoxlt3.5.12
firefoxlt3.6.9
seamonkeylt2.0.7
thunderbirdlt3.0.7
thunderbirdlt3.1.3

Name	Operator	Version
firefox	lt	3.5.12
firefox	lt	3.6.9
seamonkey	lt	2.0.7
thunderbird	lt	3.0.7
thunderbird	lt	3.1.3

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2770

bugzilla.mozilla.org/show_bug.cgi?id=583520

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

JSON

Related for MFSA2010-58