Lucene search

Veracode Vulnerability DatabaseVERACODE:24009

HistoryApr 10, 2020 - 12:43 a.m.

Denial Of Service (DoS)

2020-04-1000:43:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

Mozilla Firefox is vulnerable to Denial Of Service (DoS). Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.

CPENameOperatorVersion
esceq1.0.0__20.el5
esceq1.0.0__33.el5
esceq1.1.0__11.el5
esceq1.1.0__9.el5
esceq1.0.0__39.el5
esceq1.0.0__32.el5
totemeq2.16.7__6.el5
totemeq2.16.7__2.el5
totemeq2.16.4__2.el5
totemeq2.16.7__1.el5

Name	Operator	Version
esc	eq	1.0.0__20.el5
esc	eq	1.0.0__33.el5
esc	eq	1.1.0__11.el5
esc	eq	1.1.0__9.el5
esc	eq	1.0.0__39.el5
esc	eq	1.0.0__32.el5
totem	eq	2.16.7__6.el5
totem	eq	2.16.7__2.el5
totem	eq	2.16.4__2.el5
totem	eq	2.16.7__1.el5

Rows per page:

1-10 of 4121

References

lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html

lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html

lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html

mozilla.com/en-US/firefox/3.6.4/releasenotes/

mozilla.com/en-US/firefox/3.6/releasenotes/

mozilla.org/security/known-vulnerabilities/firefox35.html

secunia.com/advisories/40323

secunia.com/advisories/40326

secunia.com/advisories/40401

secunia.com/advisories/40481

support.avaya.com/css/P8/documents/100091069

ubuntu.com/usn/usn-930-1

www.mandriva.com/security/advisories?name=MDVSA-2010:125

www.mozilla.org/security/announce/2010/mfsa2010-26.html

www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4

www.redhat.com/security/updates/classification/#critical

www.redhat.com/support/errata/RHSA-2010-0499.html

www.redhat.com/support/errata/RHSA-2010-0500.html

www.redhat.com/support/errata/RHSA-2010-0501.html

www.securityfocus.com/bid/41050

www.securityfocus.com/bid/41090

www.securitytracker.com/id?1024138

www.securitytracker.com/id?1024139

www.ubuntu.com/usn/usn-930-2

www.vupen.com/english/advisories/2010/1551

www.vupen.com/english/advisories/2010/1556

www.vupen.com/english/advisories/2010/1557

www.vupen.com/english/advisories/2010/1592

www.vupen.com/english/advisories/2010/1640

www.vupen.com/english/advisories/2010/1773

access.redhat.com/errata/RHSA-2010:0501

bugzilla.mozilla.org/show_bug.cgi?id=484890

bugzilla.mozilla.org/show_bug.cgi?id=509839

bugzilla.mozilla.org/show_bug.cgi?id=531176

bugzilla.mozilla.org/show_bug.cgi?id=534768

bugzilla.mozilla.org/show_bug.cgi?id=551233

bugzilla.mozilla.org/show_bug.cgi?id=551661

bugzilla.mozilla.org/show_bug.cgi?id=553938

exchange.xforce.ibmcloud.com/vulnerabilities/59659

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

Related for VERACODE:24009