Address space layout leaked in XBL objects — Mozilla

2013-01-0800:00:00

Mozilla Foundation

www.mozilla.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.2%

JSON

Mozilla security researcher Jesse Ruderman discovered that using the toString function of XBL objects can lead to inappropriate information leakage by revealing the address space layout instead of just the ID of the object. This layout information could potentially be used to bypass ASLR and other security protections.

Affected configurations

Vulners

Node

mozillafirefoxRange<18

mozillafirefox_esrRange<10.0.12

mozillafirefox_esrRange<17.0.2

mozillaseamonkeyRange<2.15

mozillathunderbirdRange<17.0.2

mozillathunderbird_esrRange<10.0.12

mozillathunderbird_esrRange<17.0.2

CPENameOperatorVersion
firefoxlt18
firefox esrlt10.0.12
firefox esrlt17.0.2
seamonkeylt2.15
thunderbirdlt17.0.2
thunderbird esrlt10.0.12
thunderbird esrlt17.0.2