Lucene search

Mozilla FoundationMFSA2011-57

HistoryDec 20, 2011 - 12:00 a.m.

Crash when plugin removes itself on Mac OS X — Mozilla

2011-12-2000:00:00

Mozilla Foundation

www.mozilla.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.3%

JSON

FireBreath developer Richard Bateman reported a crash on Mac OS X that occurred when a plugin deletes its containing DOM frame during a call from that frame. The observed symptom is a null dereference but we cannot rule out the possibility that content from a scriptable plugin such as Flash could find a way to dereference a more useful address and exploit it.

Affected configurations

Vulners

Node

mozillafirefoxRange<9

mozillaseamonkeyRange<2.6

mozillathunderbirdRange<9

CPENameOperatorVersion
firefoxlt9
seamonkeylt2.6
thunderbirdlt9

Name	Operator	Version
firefox	lt	9
seamonkey	lt	2.6
thunderbird	lt	9

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3664

bugzilla.mozilla.org/show_bug.cgi?id=649079

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.3%

JSON

Related for MFSA2011-57