Описание
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 14.0.1+build1-0ubuntu2 |
| hardy | ignored | end of life |
| lucid | released | 14.0.1+build1-0ubuntu0.10.04.1 |
| natty | released | 14.0.1+build1-0ubuntu0.11.04.1 |
| oneiric | released | 14.0.1+build1-0ubuntu0.11.10.1 |
| precise | released | 14.0.1+build1-0ubuntu0.12.04.1 |
| quantal | not-affected | 14.0.1+build1-0ubuntu2 |
| raring | not-affected | 14.0.1+build1-0ubuntu2 |
| saucy | not-affected | 14.0.1+build1-0ubuntu2 |
| upstream | released | 14 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| natty | ignored | end of life |
| oneiric | ignored | end of life |
| precise | DNE | |
| quantal | DNE | |
| raring | DNE | |
| saucy | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 14.0+build1-0ubuntu2 |
| hardy | ignored | end of life |
| lucid | released | 14.0+build1-0ubuntu0.10.04.1 |
| natty | released | 14.0+build1-0ubuntu0.11.04.1 |
| oneiric | released | 14.0+build1-0ubuntu0.11.10.1 |
| precise | released | 14.0+build1-0ubuntu0.12.04.1 |
| quantal | not-affected | 14.0+build1-0ubuntu2 |
| raring | not-affected | 14.0+build1-0ubuntu2 |
| saucy | not-affected | 14.0+build1-0ubuntu2 |
| upstream | released | 14 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| natty | ignored | end of life |
| oneiric | DNE | |
| precise | DNE | |
| quantal | DNE | |
| raring | DNE | |
| saucy | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | DNE | |
| natty | ignored | end of life |
| oneiric | DNE | |
| precise | DNE | |
| quantal | DNE | |
| raring | DNE | |
| saucy | DNE | |
| upstream | needs-triage |
Показывать по
9.3 Critical
CVSS2
Связанные уязвимости
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through ...
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
9.3 Critical
CVSS2