DescriptionThe js_dtoa function in Mozilla Firefox 2.x before 22.214.171.124, 1.5.x before 126.96.36.199, Thunderbird before 188.8.131.52, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2006:080, published Fri, 29 Dec 2006 15:00:00 +0000
- SUSE-SA:2007:006, published Fri, 12 Jan 2007 13:00:00 +0000
SUSE Timeline for this CVECVE page created: Fri Jun 28 05:19:52 2013
CVE page last modified: Fri Oct 7 12:45:35 2022