Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:57 a.m.2 views

SUSE CVE-2010-3183

The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.lookupGetter function calls that lack arguments, which allows remote attackers to...

9.3CVSS9.2AI score0.06976EPSS
Exploits1References7
Cvelist
Cvelist
added 2011/03/02 7:0 p.m.20 views

CVE-2011-0055

Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the jsHasOwnProperty function and garbage...

9.6AI score0.03375EPSS
Exploits0References9
CVE
CVE
added 2011/03/02 7:0 p.m.90 views

CVE-2011-0055

CVE-2011-0055 is a use-after-free in JSON.stringify in js3250.dll affecting Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12. The issue is related to the js_HasOwnProperty handling and garbage collection; exploitation details are not specified in the provided doc...

10CVSS9.4AI score0.03375EPSS
Exploits0References9Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2011/03/02 12:0 a.m.38 views

Mozilla Firefox JSON.stringify Dangling Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within js3250.dll. In the...

9CVSS4.3AI score0.03375EPSS
Exploits0References1
Prion
Prion
added 2010/10/21 7:0 p.m.22 views

Null pointer dereference

The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.lookupGetter function calls that lack arguments, which allows remote attackers to...

9.3CVSS8.2AI score0.06976EPSS
Exploits1References19Affected Software3
Zero Day Initiative
Zero Day Initiative
added 2010/10/19 12:0 a.m.34 views

Mozilla Firefox LookupGetterOrSetter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in js3250.dll. When a...

9CVSS9.5AI score0.06976EPSS
Exploits1References1
Rows per page
Query Builder