Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4gq-6hmw-x862

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

EPSS

Процентиль: 69%
0.01286
Низкий

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 6 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS3: 8.8
redhat
почти 6 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS3: 8.8
nvd
почти 6 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS3: 8.8
debian
почти 6 лет назад

During browser shutdown, reference decrementing could have occured on ...

CVSS3: 6.1
fstec
почти 6 лет назад

Уязвимость компонента WebRequestService веб-браузера Firefox и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 69%
0.01286
Низкий

Дефекты

CWE-416