Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r42g-6jh5-6q2v

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.

EPSS

Процентиль: 87%
0.03594
Низкий

Дефекты

CWE-119

Связанные уязвимости

redhat
около 14 лет назад

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.

nvd
около 14 лет назад

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.

debian
около 14 лет назад

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly othe ...

oracle-oval
около 14 лет назад

ELSA-2011-0426: spice-xpi security update (MODERATE)

fstec
около 14 лет назад

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 87%
0.03594
Низкий

Дефекты

CWE-119