Mozilla: use-after-free in IDBKeyRange (MFSA 2012-22)

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

Design/Logic Flaw

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Removed by vendor...

CVE-2011-3955

CVE-2011-3955 affects Google Chrome/Chromium up to version 17.0.963.46, where an attacker could trigger an IndexedDB transaction abort, causing the application to crash or potentially other impact. The vulnerability is discussed in multiple advisories (e.g., Gentoo GLSA-201202-01) with explicit r...