Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3650

Опубликовано: 08 нояб. 2011
Источник: redhat
CVSS2: 5.1
EPSS Низкий

Описание

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=751933Mozilla: crash while profiling page with many functions (MFSA 2011-49)

EPSS

Процентиль: 84%
0.0233
Низкий

5.1 Medium

CVSS2

Связанные уязвимости

ubuntu
около 15 лет назад

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.

nvd
около 15 лет назад

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.

debian
около 15 лет назад

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird befo ...

github
больше 4 лет назад

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.

oracle-oval
около 15 лет назад

ELSA-2011-1439: thunderbird security update (CRITICAL)

EPSS

Процентиль: 84%
0.0233
Низкий

5.1 Medium

CVSS2