PT-2006-1369
CVE-2006-0295
·
تاريخ النشر
2006-02-02
·
تاريخ التحديث
2018-10-19
الوصف من
CVSS 2.0
5.1
متوسطةالمقاييسAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox version 1.5
Thunderbird version 1.5
SeaMonkey versions prior to 1.0
Description
The issue allows remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.
Recommendations
For Mozilla Firefox version 1.5, update to a version that fixes the memory corruption issue.
For Thunderbird version 1.5, consider disabling Javascript in mail as a temporary workaround until a patch is available.
For SeaMonkey versions prior to 1.0, update to a version that fixes the memory corruption issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾