Arbitrary Code Execution

2020-04-1001:09:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

66.2%

JSON

firefox is vulnerable to arbitrary code execution. The vulnerability exists through a flaw found in the way Firefox decoded the ISO-2022-KR and ISO-2022-CN character sets. A web page containing malicious content could cause Firefox to run JavaScript code with the permissions of a different website.

CPENameOperatorVersion
firefoxeq3.6.9__2.el6
firefoxeq3.6.15__1.el5_6
firefoxeq10.0.1__1.el6_2
firefoxeq3.0.1__1.el5
firefoxeq3.6.23__2.el5_7
firefoxeq3.0.15__3.el5_4
firefoxeq3.0.5__1.el5_2
firefoxeq3.6.17__1.el5_6
firefoxeq1.5.0.9__10.el5
firefoxeq1.5.0.12__9.el5

Name	Operator	Version
firefox	eq	3.6.9__2.el6
firefox	eq	3.6.15__1.el5_6
firefox	eq	10.0.1__1.el6_2
firefox	eq	3.0.1__1.el5
firefox	eq	3.6.23__2.el5_7
firefox	eq	3.0.15__3.el5_4
firefox	eq	3.0.5__1.el5_2
firefox	eq	3.6.17__1.el5_6
firefox	eq	1.5.0.9__10.el5
firefox	eq	1.5.0.12__9.el5