Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f7wc-pcqv-5mwm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.

EPSS

Процентиль: 66%
0.00523
Низкий

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 4 года назад

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.

CVSS3: 7.5
redhat
почти 4 года назад

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.

CVSS3: 7.5
nvd
почти 4 года назад

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.

CVSS3: 7.5
debian
почти 4 года назад

During process shutdown, a document could have caused a use-after-free ...

CVSS3: 8.8
fstec
почти 4 года назад

Уязвимость объекта nsLanguageAtomService браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 66%
0.00523
Низкий

Дефекты

CWE-416