Lucene search

K
mozillaMozilla FoundationMFSA2011-42
HistorySep 27, 2011 - 12:00 a.m.

Potentially exploitable crash in the YARR regular expression library โ€” Mozilla

2011-09-2700:00:00
Mozilla Foundation
www.mozilla.org
13

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%

Security researcher Aki Helin reported a potentially exploitable crash in the YARR regular expression library used by JavaScript.

CPENameOperatorVersion
firefoxlt7
seamonkeylt2.4
thunderbirdlt7

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%