Memory corruption

2012-06-0523:55:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.041 Low

EPSS

Percentile

91.9%

JSON

jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.

CPENameOperatorVersion
firefox_esreq10.0
firefox_esreq10.0.2
firefox_esreq10.0.1
firefox_esreq10.0.3
firefox_esreq10.0.4
thunderbird_esreq10.0.3
thunderbird_esreq10.0
thunderbird_esreq10.0.4
thunderbird_esreq10.0.2
thunderbird_esreq10.0.1

Name	Operator	Version
firefox_esr	eq	10.0
firefox_esr	eq	10.0.2
firefox_esr	eq	10.0.1
firefox_esr	eq	10.0.3
firefox_esr	eq	10.0.4
thunderbird_esr	eq	10.0.3
thunderbird_esr	eq	10.0
thunderbird_esr	eq	10.0.4
thunderbird_esr	eq	10.0.2
thunderbird_esr	eq	10.0.1