PT-2012-2590
CVE-2012-0469
·
تاريخ النشر
2012-04-24
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 4.x through 11.0
Firefox ESR versions 10.x before 10.0.4
Thunderbird versions 5.0 through 11.0
Thunderbird ESR versions 10.x before 10.0.4
SeaMonkey version before 2.9
Description
The issue allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data, specifically in the
mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function. This is a use-after-free vulnerability.Recommendations
For Mozilla Firefox versions 4.x through 11.0, update to a version after 11.0.
For Firefox ESR versions 10.x before 10.0.4, update to version 10.0.4 or later.
For Thunderbird versions 5.0 through 11.0, update to a version after 11.0.
For Thunderbird ESR versions 10.x before 10.0.4, update to version 10.0.4 or later.
For SeaMonkey version before 2.9, update to version 2.9 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾