Описание
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | firefox | Not affected | ||
| Red Hat Enterprise Linux 4 | firefox | Fixed | RHSA-2010:0681 | 08.09.2010 |
| Red Hat Enterprise Linux 4 | nspr | Fixed | RHSA-2010:0681 | 08.09.2010 |
| Red Hat Enterprise Linux 4 | nss | Fixed | RHSA-2010:0681 | 08.09.2010 |
| Red Hat Enterprise Linux 5 | firefox | Fixed | RHSA-2010:0681 | 08.09.2010 |
| Red Hat Enterprise Linux 5 | nspr | Fixed | RHSA-2010:0681 | 08.09.2010 |
| Red Hat Enterprise Linux 5 | nss | Fixed | RHSA-2010:0681 | 08.09.2010 |
| Red Hat Enterprise Linux 5 | xulrunner | Fixed | RHSA-2010:0681 | 08.09.2010 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3. ...
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
EPSS
6.8 Medium
CVSS2