CVE

Id
43796  
CVE No.
CVE-2010-1212  
Status
Candidate  
Description
js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.  
Phase
Assigned (20100330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
477323 43796 CVE-2010-1212 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-34.html  View
477324 43796 CVE-2010-1212 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=530955  View
477325 43796 CVE-2010-1212 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=558618  View
477326 43796 CVE-2010-1212 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=568855  View
477327 43796 CVE-2010-1212 OVAL:oval:org.mitre.oval:def:11771  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38855 JVNDB-2010-004640 notsoPureEdit の templates/template.php における PHP リモートファイルインクルージョンの脆弱性 notsoPureEdit の templates/template.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2010-1216 43796 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004640.html  View