9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.055 Low
EPSS
Percentile
93.1%
Mozilla community member Jerry Baker reported a crashing issue found through Thunderbird when downloading messages over a Secure Sockets Layer (SSL) connection. This was caused by a bug in the networking code assuming that secure connections were entirely handled on the socket transport thread when they can occur on a variety of threads. The resulting crash was potentially exploitable.
CPE | Name | Operator | Version |
---|---|---|---|
firefox | lt | 18 | |
firefox esr | lt | 17.0.2 | |
seamonkey | lt | 2.15 | |
thunderbird | lt | 17.0.2 | |
thunderbird esr | lt | 17.0.2 |