Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΎΡΠΊΠ°Π·Π° Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ (DoS) Π² ΠΌΠ΅ΡΠΎΠ΄Π΅ "XMLHttpRequest.prototype.send" Mozilla Firefox, Firefox ESR, Thunderbird ΠΈ SeaMonkey ΡΠ΅ΡΠ΅Π· ΡΠΏΠ΅ΡΠΈΠ°Π»ΡΠ½ΠΎ ΡΠΎΠ·Π΄Π°Π½Π½ΡΠΉ JavaScript-ΠΎΠ±ΡΠ΅ΠΊΡ
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅
ΠΠ±Π½Π°ΡΡΠΆΠ΅Π½Π° ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π² ΠΌΠ΅ΡΠΎΠ΄Π΅ XMLHttpRequest.prototype.send Π² Mozilla Firefox, Firefox ESR, Thunderbird ΠΈ SeaMonkey. Π£Π΄Π°Π»ΡΠ½Π½ΡΠ΅ Π·Π»ΠΎΡΠΌΡΡΠ»Π΅Π½Π½ΠΈΠΊΠΈ ΠΌΠΎΠ³ΡΡ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ (Π°Π²Π°ΡΠΈΠΉΠ½ΠΎΠ΅ Π·Π°Π²Π΅ΡΡΠ΅Π½ΠΈΠ΅ ΡΠ°Π±ΠΎΡΡ ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ) ΡΠ΅ΡΠ΅Π· ΡΠΏΠ΅ΡΠΈΠ°Π»ΡΠ½ΠΎ ΡΠΎΠ·Π΄Π°Π½Π½ΡΠΉ JavaScript-ΠΎΠ±ΡΠ΅ΠΊΡ.
ΠΠ°ΡΡΠΎΠ½ΡΡΡΠ΅ Π²Π΅ΡΡΠΈΠΈ ΠΠ
- Mozilla Firefox Π΄ΠΎ Π²Π΅ΡΡΠΈΠΈ 34.0
- Mozilla Firefox ESR 31.x Π΄ΠΎ Π²Π΅ΡΡΠΈΠΈ 31.3
- Thunderbird Π΄ΠΎ Π²Π΅ΡΡΠΈΠΈ 31.3
- SeaMonkey Π΄ΠΎ Π²Π΅ΡΡΠΈΠΈ 2.31
Π’ΠΈΠΏ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
- ΠΠ²Π°ΡΠΈΠΉΠ½ΠΎΠ΅ Π·Π°Π²Π΅ΡΡΠ΅Π½ΠΈΠ΅ ΡΠ°Π±ΠΎΡΡ ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ (application crash)
- ΠΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ (DoS)
ΠΠ°ΡΡΠΎΠ½ΡΡΡΠ΅ ΠΏΠ°ΠΊΠ΅ΡΡ
| ΠΠ»Π°ΡΡΠΎΡΠΌΠ° | ΠΠ°ΠΊΠ΅Ρ | Π‘ΠΎΡΡΠΎΡΠ½ΠΈΠ΅ | Π Π΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΡ | Π Π΅Π»ΠΈΠ· |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | thunderbird | Affected | ||
| Red Hat Enterprise Linux 5 | firefox | Fixed | RHSA-2014:1919 | 02.12.2014 |
| Red Hat Enterprise Linux 5 | thunderbird | Fixed | RHSA-2014:1924 | 02.12.2014 |
| Red Hat Enterprise Linux 6 | firefox | Fixed | RHSA-2014:1919 | 02.12.2014 |
| Red Hat Enterprise Linux 6 | thunderbird | Fixed | RHSA-2014:1924 | 02.12.2014 |
| Red Hat Enterprise Linux 7 | firefox | Fixed | RHSA-2014:1919 | 02.12.2014 |
ΠΠΎΠΊΠ°Π·ΡΠ²Π°ΡΡ ΠΏΠΎ
ΠΠΎΠΏΠΎΠ»Π½ΠΈΡΠ΅Π»ΡΠ½Π°Ρ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΡ
Π‘ΡΠ°ΡΡΡ:
4.3 Medium
CVSS2
Π‘Π²ΡΠ·Π°Π½Π½ΡΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34. ...
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
ELSA-2014-1924: thunderbird security update (IMPORTANT)
4.3 Medium
CVSS2