Lucene search

K
mozillaMozilla FoundationMFSA2013-79
HistorySep 17, 2013 - 12:00 a.m.

Use-after-free in Animation Manager during stylesheet cloning β€” Mozilla

2013-09-1700:00:00
Mozilla Foundation
www.mozilla.org
15

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.045 Low

EPSS

Percentile

92.5%

Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a use-after-free problem in the Animation Manager during the cloning of stylesheets. This can lead to a potentially exploitable crash.

Affected configurations

Vulners
Node
mozillafirefoxRange<24
OR
mozillafirefox_esrRange<17.0.9
OR
mozillaseamonkeyRange<2.21
OR
mozillathunderbirdRange<24
OR
mozillathunderbird_esrRange<17.0.9

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.045 Low

EPSS

Percentile

92.5%