Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fw5c-gh38-g4gg

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.

The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.

EPSS

Процентиль: 70%
0.01416
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 10 лет назад

The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.

CVSS3: 5.6
redhat
почти 10 лет назад

The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.

CVSS3: 6.5
nvd
почти 10 лет назад

The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.

CVSS3: 6.5
debian
почти 10 лет назад

The PropertyProvider::GetSpacingInternal function in Mozilla Firefox b ...

suse-cvrf
почти 10 лет назад

Security update for MozillaFirefox, mozilla-nss

EPSS

Процентиль: 70%
0.01416
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125