PT-2014-1457
CVE-2014-1537
·
تاريخ النشر
2014-06-10
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 30.0
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to a use-after-free vulnerability in the
mozilla::dom::workers::WorkerPrivateParent function. This vulnerability can lead to heap memory corruption.Recommendations
For versions prior to 30.0, update to version 30.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
mozilla::dom::workers::WorkerPrivateParent function until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾