Lucene search

K
mozillaMozilla FoundationMFSA2013-50
HistoryJun 25, 2013 - 12:00 a.m.

Memory corruption found using Address Sanitizer — Mozilla

2013-06-2500:00:00
Mozilla Foundation
www.mozilla.org
16

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.083 Low

EPSS

Percentile

94.4%

Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free problems rated critical as security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting additional use-after-free and buffer overflow flaws in code introduced during Firefox development. These were fixed before general release.

Affected configurations

Vulners
Node
mozillafirefoxRange<22
OR
mozillafirefox_esrRange<17.0.7
OR
mozillaseamonkeyRange<2.19
OR
mozillathunderbirdRange<17.0.7
OR
mozillathunderbird_esrRange<17.0.7

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.083 Low

EPSS

Percentile

94.4%