Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2009-2463

Опубликовано: 22 июл. 2009
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 10

Описание

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

РелизСтатусПримечание
dapper

ignored

end of life
devel

not-affected

hardy

ignored

end of life
intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

not-affected

maverick

not-affected

natty

not-affected

oneiric

not-affected

Показывать по

РелизСтатусПримечание
dapper

ignored

end of life
devel

DNE

hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

not-affected

3.0.3+nobinonly-0ubuntu1
hardy

released

2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1
intrepid

released

2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1
jaunty

released

2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1
karmic

released

2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1
lucid

not-affected

3.0.3+nobinonly-0ubuntu1
maverick

not-affected

3.0.3+nobinonly-0ubuntu1
natty

not-affected

3.0.3+nobinonly-0ubuntu1
oneiric

not-affected

3.0.3+nobinonly-0ubuntu1

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

ignored

end of life
intrepid

ignored

end of life, was needed
jaunty

ignored

end of life
karmic

ignored

end of life
lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

released

1.9.0.12+build1+nobinonly-0ubuntu0.8.04.1
intrepid

released

1.9.0.12+build1+nobinonly-0ubuntu0.8.10.2
jaunty

released

1.9.0.12+build1+nobinonly-0ubuntu0.9.04.1
karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

DNE

intrepid

DNE

jaunty

released

1.9.1.1+build1+nobinonly-0ubuntu0.9.04.1
karmic

released

1.9.1.1+build1+nobinonly-0ubuntu1
lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

EPSS

Процентиль: 88%
0.04167
Низкий

10 Critical

CVSS2

Связанные уязвимости

redhat
почти 16 лет назад

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

nvd
почти 16 лет назад

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

debian
почти 16 лет назад

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base6 ...

github
около 3 лет назад

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

fstec
больше 10 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 88%
0.04167
Низкий

10 Critical

CVSS2