Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2010-1198

Опубликовано: 22 июн. 2010
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6firefoxNot affected
Red Hat Enterprise Linux 3seamonkeyFixedRHSA-2010:049922.06.2010
Red Hat Enterprise Linux 4seamonkeyFixedRHSA-2010:049922.06.2010
Red Hat Enterprise Linux 4firefoxFixedRHSA-2010:050022.06.2010
Red Hat Enterprise Linux 4thunderbirdFixedRHSA-2010:054421.07.2010
Red Hat Enterprise Linux 5devhelpFixedRHSA-2010:050122.06.2010
Red Hat Enterprise Linux 5escFixedRHSA-2010:050122.06.2010
Red Hat Enterprise Linux 5firefoxFixedRHSA-2010:050122.06.2010
Red Hat Enterprise Linux 5gnome-python2-extrasFixedRHSA-2010:050122.06.2010
Red Hat Enterprise Linux 5totemFixedRHSA-2010:050122.06.2010

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=590828Mozilla Freed object reuse across plugin instances

EPSS

Процентиль: 89%
0.05095
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 15 лет назад

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

nvd
почти 15 лет назад

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

debian
почти 15 лет назад

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 an ...

github
около 3 лет назад

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

oracle-oval
почти 15 лет назад

ELSA-2010-0501: firefox security, bug fix, and enhancement update (CRITICAL)

EPSS

Процентиль: 89%
0.05095
Низкий

6.8 Medium

CVSS2