CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
94.4%
Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify
function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6,
Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows
remote attackers to execute arbitrary code or cause a denial of service
(heap memory corruption) via unspecified vectors.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 12.04 | noarch | firefox | < 21.0+build1-0ubuntu0.12.04.3 | UNKNOWN |
ubuntu | 12.10 | noarch | firefox | < 21.0+build1-0ubuntu0.12.10.2 | UNKNOWN |
ubuntu | 13.04 | noarch | firefox | < 21.0+build1-0ubuntu0.12.04.2 | UNKNOWN |
ubuntu | 12.04 | noarch | thunderbird | < 17.0.6+build1-0ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 12.10 | noarch | thunderbird | < 17.0.6+build1-0ubuntu0.12.10.1 | UNKNOWN |
ubuntu | 13.04 | noarch | thunderbird | < 17.0.6+build1-0ubuntu0.13.04.1 | UNKNOWN |