Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:15517
HistoryMay 02, 2019 - 5:01 a.m.

Use-After-Free

2019-05-0205:01:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Mozilla Thunderbird is vulnerable to use-after-free. It allows the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird.

References

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C