← volver
CVE-2011-0073

CVE-2011-0073

EPSS 70.0%
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/17419no verificadoexploitdbwww.exploit-db.com/exploits/17520no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://downloads.avaya.com/css/P8/documents/100134543http://downloads.avaya.com/css/P8/documents/100144158https://bugzilla.mozilla.org/show_bug.cgi?id=630919http://securityreason.com/securityalert/8310https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020http://www.debian.org/security/2011/dsa-2227http://www.debian.org/security/2011/dsa-2228http://www.debian.org/security/2011/dsa-2235http://www.mandriva.com/security/advisories?name=MDVSA-2011:079http://www.mozilla.org/security/announce/2011/mfsa2011-13.html