PT-2011-2048

CVE-2011-0054

تاريخ النشر

2011-03-02

تاريخ التحديث

2017-09-19

الوصف من

CVSS 2.0

عالية

المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.17 Mozilla Firefox versions 3.6.x prior to 3.6.14 SeaMonkey versions prior to 2.0.12

Description A buffer overflow issue exists in the JavaScript engine, potentially allowing remote attackers to execute arbitrary code. This issue involves vectors related to non-local JavaScript variables, specifically an "upvarMap" problem.

Recommendations For Mozilla Firefox versions prior to 3.5.17, update to version 3.5.17 or later. For Mozilla Firefox versions 3.6.x prior to 3.6.14, update to version 3.6.14 or later. For SeaMonkey versions prior to 2.0.12, update to version 2.0.12 or later.

قابلية الاستغلال

إصلاح

التأثيرات

الباحثون

Christian Holler

Decoder

المورّدون

المنتجات المتأثرة

تصنيف نقاط الضعف

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

المعرّفات ذات الصلة

CVE-2011-0054