Beveiligingsadvies

CVE-2008-5014

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-11-13 11:00:00

Laatst bijgewerkt 2024-08-07 10:40:17

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.

← Alle CVE's bekijken Bekijk op cve.org ↗