Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42206
HistoryAug 06, 2023 - 9:31 a.m.

Arbitrary Code Execution

2023-08-0609:31:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
arbitrary code execution
firefox
webgl

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.7%

firefox is vulnerable to Arbitrary Code Execution. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is invalid, Firefox could free memory that is still in use which could lead to a crash or arbitrary code execution.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.7%