Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3m72-27jq-pc52

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 101.

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 101.

EPSS

Процентиль: 53%
0.00699
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 4 года назад

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 101.

CVSS3: 9.8
nvd
почти 4 года назад

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 101.

CVSS3: 9.8
debian
почти 4 года назад

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon ...

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость браузеров Firefox, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
altlinux
больше 4 лет назад

ALT-PU-2022-1988: package `firefox` update to version 101.0-alt1

EPSS

Процентиль: 53%
0.00699
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119