Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8vqh-gxqj-vj4q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.

EPSS

Процентиль: 63%
0.00451
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 5 лет назад

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.

CVSS3: 8.8
redhat
около 5 лет назад

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.

CVSS3: 8.8
nvd
почти 5 лет назад

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.

CVSS3: 8.8
debian
почти 5 лет назад

When aborting an operation, such as a fetch, an abort signal may be de ...

CVSS3: 8.8
fstec
около 5 лет назад

Уязвимость браузера Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с использованием памяти после ее освобождения, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 63%
0.00451
Низкий