Описание
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| lucid | ignored | end of life |
| precise | released | 27.0+build1-0ubuntu0.12.04.1 |
| quantal | released | 27.0+build1-0ubuntu0.12.10.1 |
| saucy | released | 27.0+build1-0ubuntu0.13.10.1 |
| upstream | released | 27.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1:24.4.0+build1-0ubuntu1 |
| lucid | ignored | end of life |
| precise | released | 1:24.3.0+build2-0ubuntu0.12.04.1 |
| quantal | released | 1:24.3.0+build2-0ubuntu0.12.10.1 |
| saucy | released | 1:24.3.0+build2-0ubuntu0.13.10.1 |
| upstream | released | 24.3.0 |
Показывать по
10 Critical
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
Use-after-free vulnerability in the imgRequestProxy function in Mozill ...
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
10 Critical
CVSS2
9.8 Critical
CVSS3