Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-0057

Опубликовано: 01 мар. 2011
Источник: redhat
CVSS2: 6.8

Описание

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux Extended Update Support 4.8firefoxAffected
Red Hat Enterprise Linux Extended Update Support 5.6firefoxAffected
Red Hat Enterprise Linux Extended Update Support 6.0firefoxAffected
Red Hat Enterprise Linux 4firefoxFixedRHSA-2011:031002.03.2011
Red Hat Enterprise Linux 5firefoxFixedRHSA-2011:031002.03.2011
Red Hat Enterprise Linux 5xulrunnerFixedRHSA-2011:031002.03.2011
Red Hat Enterprise Linux 6firefoxFixedRHSA-2011:031002.03.2011
Red Hat Enterprise Linux 6xulrunnerFixedRHSA-2011:031002.03.2011

Показывать по

Дополнительная информация

Статус:

Critical
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=675093Mozilla use-after-free error using Web Workers (MFSA 2011-06)

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 15 лет назад

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.

nvd
почти 15 лет назад

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.

debian
почти 15 лет назад

Use-after-free vulnerability in the Web Workers implementation in Mozi ...

github
почти 4 года назад

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.

oracle-oval
почти 15 лет назад

ELSA-2011-0310: firefox security and bug fix update (CRITICAL)

6.8 Medium

CVSS2