Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-0084

Опубликовано: 16 авг. 2011
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=730519Mozilla: Crash in SVGTextElement.getCharNumAtPosition()

EPSS

Процентиль: 91%
0.04805
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
около 15 лет назад

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

nvd
около 15 лет назад

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

debian
около 15 лет назад

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox be ...

github
больше 4 лет назад

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

oracle-oval
около 15 лет назад

ELSA-2011-1166: thunderbird security update (CRITICAL)

EPSS

Процентиль: 91%
0.04805
Низкий

6.8 Medium

CVSS2