Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43462
HistoryOct 02, 2023 - 7:13 p.m.

Denial Of Service (DoS)

2023-10-0219:13:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
firefox-esr
dos attack
malicious data
out-of-bounds write
exploitable crash
privileged process
software

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

29.3%

firefox-esr is vulnerable to Denial Of Service (DoS). An attacker can supply malicious data to FilterNodeD2D1, causing an out-of-bounds write and potentially leading to an exploitable crash in a privileged process.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

29.3%