Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

fstec Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

BDU:2015-02789

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 01 янв. 2015
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: fstec
CVSS2: 10
EPSS Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ

ОписаниС

ΠœΠ½ΠΎΠΆΠ΅ΡΡ‚Π²Π΅Π½Π½Ρ‹Π΅ уязвимости ΠΏΠ°ΠΊΠ΅Ρ‚Π° libmozjs0d-dbg ΠΎΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½ΠΎΠΉ систСмы DebianΒ GNU/Linux, эксплуатация ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Ρ… ΠΌΠΎΠΆΠ΅Ρ‚ привСсти ΠΊ Π½Π°Ρ€ΡƒΡˆΠ΅Π½ΠΈΡŽ ΠΊΠΎΠ½Ρ„ΠΈΠ΄Π΅Π½Ρ†ΠΈΠ°Π»ΡŒΠ½ΠΎΡΡ‚ΠΈ, цСлостности ΠΈ доступности Π·Π°Ρ‰ΠΈΡ‰Π°Π΅ΠΌΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ. Эксплуатация уязвимостСй ΠΌΠΎΠΆΠ΅Ρ‚ Π±Ρ‹Ρ‚ΡŒ осущСствлСна ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎ

Π’Π΅Π½Π΄ΠΎΡ€

БообщСство свободного ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½ΠΎΠ³ΠΎ обСспСчСния

НаимСнованиС ПО

Debian GNU/Linux

ВСрсия ПО

Π΄ΠΎ 4 (Debian GNU/Linux)

Вип ПО

ΠžΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½Π°Ρ систСма

ΠžΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½Ρ‹Π΅ систСмы ΠΈ Π°ΠΏΠΏΠ°Ρ€Π°Ρ‚Π½Ρ‹Π΅ ΠΏΠ»Π°Ρ‚Ρ„ΠΎΡ€ΠΌΡ‹

-

Π£Ρ€ΠΎΠ²Π΅Π½ΡŒ опасности уязвимости

ΠšΡ€ΠΈΡ‚ΠΈΡ‡Π΅ΡΠΊΠΈΠΉ ΡƒΡ€ΠΎΠ²Π΅Π½ΡŒ опасности (базовая ΠΎΡ†Π΅Π½ΠΊΠ° CVSS 2.0 составляСт 10)

Π’ΠΎΠ·ΠΌΠΎΠΆΠ½Ρ‹Π΅ ΠΌΠ΅Ρ€Ρ‹ ΠΏΠΎ ΡƒΡΡ‚Ρ€Π°Π½Π΅Π½ΠΈΡŽ уязвимости

ΠŸΡ€ΠΎΠ±Π»Π΅ΠΌΠ° ΠΌΠΎΠΆΠ΅Ρ‚ Π±Ρ‹Ρ‚ΡŒ Ρ€Π΅ΡˆΠ΅Π½Π° ΠΎΠ±Π½ΠΎΠ²Π»Π΅Π½ΠΈΠ΅ΠΌ ΠΎΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½ΠΎΠΉ систСмы Π΄ΠΎ ΡΠ»Π΅Π΄ΡƒΡŽΡ‰ΠΈΡ… вСрсий ΠΏΠ°ΠΊΠ΅Ρ‚ΠΎΠ² Π² зависимости ΠΎΡ‚ Π°Ρ€Ρ…ΠΈΡ‚Π΅ΠΊΡ‚ΡƒΡ€Ρ‹:
Debian GNU/Linux 4:
ppc:
python-xpcom - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
s390x:
libmozjs0d - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
i686:
libxul0d - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
hppa:
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
sparc:
libnss3-0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
x86-64:
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
ia64:
python-xpcom - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
alpha:
xulrunner - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
noarch:
libsmjs-dev - 1.8.0.15~pre080614h-0etch1
libnss3-dev - 1.8.0.15~pre080614h-0etch1
libmozjs-dev - 1.8.0.15~pre080614h-0etch1
libsmjs1 - 1.8.0.15~pre080614h-0etch1
libxul-dev - 1.8.0.15~pre080614h-0etch1
libxul-common - 1.8.0.15~pre080614h-0etch1
libmozillainterfaces-java - 1.8.0.15~pre080614h-0etch1
libnspr4-dev - 1.8.0.15~pre080614h-0etch1
mipsel:
xulrunner - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
arm:
spidermonkey-bin - 1.8.0.15~pre080614h-0etch1
libnss3-0d - 1.8.0.15~pre080614h-0etch1
libxul0d-dbg - 1.8.0.15~pre080614h-0etch1
libxul0d - 1.8.0.15~pre080614h-0etch1
libnspr4-0d-dbg - 1.8.0.15~pre080614h-0etch1
xulrunner-gnome-support - 1.8.0.15~pre080614h-0etch1
libnss3-tools - 1.8.0.15~pre080614h-0etch1
libnss3-0d-dbg - 1.8.0.15~pre080614h-0etch1
python-xpcom - 1.8.0.15~pre080614h-0etch1
libnspr4-0d - 1.8.0.15~pre080614h-0etch1
libmozjs0d - 1.8.0.15~pre080614h-0etch1
xulrunner - 1.8.0.15~pre080614h-0etch1
libmozjs0d-dbg - 1.8.0.15~pre080614h-0etch

Бтатус уязвимости

ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½Π° ΠΏΡ€ΠΎΠΈΠ·Π²ΠΎΠ΄ΠΈΡ‚Π΅Π»Π΅ΠΌ

НаличиС эксплойта

Π”Π°Π½Π½Ρ‹Π΅ ΡƒΡ‚ΠΎΡ‡Π½ΡΡŽΡ‚ΡΡ

Π˜Π½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΡ ΠΎΠ± устранСнии

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ устранСна

Π˜Π΄Π΅Π½Ρ‚ΠΈΡ„ΠΈΠΊΠ°Ρ‚ΠΎΡ€Ρ‹ Π΄Ρ€ΡƒΠ³ΠΈΡ… систСм описаний уязвимостСй

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 99%
0.43921
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ

10 Critical

CVSS2

БвязанныС уязвимости

ubuntu
ΠΏΠΎΡ‡Ρ‚ΠΈ 18 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

redhat
ΠΏΠΎΡ‡Ρ‚ΠΈ 18 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

nvd
ΠΏΠΎΡ‡Ρ‚ΠΈ 18 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

debian
ΠΏΠΎΡ‡Ρ‚ΠΈ 18 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Stack-based buffer overflow in the URL parsing implementation in Mozil ...

github
ΠΎΠΊΠΎΠ»ΠΎ 4 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 99%
0.43921
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ

10 Critical

CVSS2

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ BDU:2015-02789