Lucene search
Ubuntu.comUB:CVE-2010-1028HistoryMar 19, 2010 - 12:00 a.m.
CVE-2010-1028
2010-03-1900:00:00
ubuntu.com
ubuntu.com
4
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.839 High
EPSS
Percentile
98.5%
Integer overflow in the decompression functionality in the Web Open Fonts
Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before
3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted
WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff
module in VulnDisco 9.0.
Related
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox WOFF Font Processing Integer Overflow (CVE-2010-1028)
2010-05-09 00:00:00
prion
prion
Integer overflow
2010-03-19 21:30:00
Memory corruption
2010-03-25 22:30:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-08
2010-04-06 00:00:00
x90c WOFF Firefox 1day exploit
2013-08-20 00:00:00
seebug
seebug
Mozilla Firefox 3.6 WOFF解码器整数溢出漏洞
2010-03-24 00:00:00
zdt
zdt
Mozilla Firefox 3.6 - Integer Overflow Exploit
2013-08-19 00:00:00
openvas
openvas
Mozilla Firefox Unspecified Vulnerability (Windows)
2010-03-23 00:00:00
FreeBSD Ports: firefox
2010-03-30 00:00:00
Mozilla Firefox Unspecified Vulnerability - Windows
2010-03-23 00:00:00
zdi
zdi
freebsd
freebsd
firefox -- WOFF heap corruption due to integer overflow
2010-03-22 00:00:00
cve
cve
CVE-2010-1028
2010-03-19 21:30:00
CVE-2010-1122
2010-03-25 22:30:00
cert
cert
Mozilla WOFF decoder integer overflow
2010-03-23 00:00:00
nessus
nessus
FreeBSD : firefox -- WOFF heap corruption due to integer overflow (5d5ed535-3653-11df-9edc-000f20797ede)
2010-03-24 00:00:00
CentOS 4 : firefox (CESA-2010:0500)
2010-08-09 00:00:00
Mozilla Firefox < 3.6.2 Multiple Vulnerabilities.
2010-03-23 00:00:00
debiancve
debiancve
CVE-2010-1028
2010-03-19 21:30:00
mozilla
mozilla
WOFF heap corruption due to integer overflow — Mozilla
2010-03-22 00:00:00
ubuntucve
ubuntucve
CVE-2010-1122
2010-03-25 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.839 High
EPSS
Percentile
98.5%
Related for UB:CVE-2010-1028