Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:24334
HistoryApr 10, 2020 - 12:52 a.m.

Arbitrary Code Execution

2020-04-1000:52:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

firefox is vulnerable to arbitrary code execution. An attacker is able to exploit the vulnerability within the OS font implementation to execute arbitrary code using malformed OpenType fonts by verifying the font file prior to use.

References

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C