Lucene search

K
mozillaMozilla FoundationMFSA2011-49
HistoryNov 08, 2011 - 12:00 a.m.

Memory corruption while profiling using Firebug — Mozilla

2011-11-0800:00:00
Mozilla Foundation
www.mozilla.org
30

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.011

Percentile

84.3%

Marc Schoenefeld reported a crash when using Firebug to profile a JavaScript file with many functions. It may be possible to trigger this crash without the use of debugging APIs, and if so this could be exploitable.

Affected configurations

Vulners
Node
mozillafirefoxRange<3.6.24
OR
mozillafirefoxRange<8
OR
mozillaseamonkeyRange<2.5
OR
mozillathunderbirdRange<3.1.16
OR
mozillathunderbirdRange<8

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.011

Percentile

84.3%