Upstream information
Description
layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.SUSE information
Overall state of this security issue: Ignore
This issue is currently rated as having important severity.
National Vulnerability Database | |
---|---|
Base Score | 10 |
Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
- SUSE-SA:2010:032, published Fri, 30 Jul 2010 11:00:00 +0000
- openSUSE-SU-2010:0430-3, published Thu, 29 Jul 2010 19:08:09 +0200 (CEST)
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Server 12 SP1 |
| |
SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 |
| |
SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP3 |
| |
SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 |
| |
SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 |
| |
SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP5 |
| |
SUSE Linux Enterprise Module for Desktop Applications 15 |
| |
SUSE Linux Enterprise Server 11 SP2 |
| |
SUSE Linux Enterprise Server 11 SP3 |
| |
SUSE Linux Enterprise Server 11 SP4 |
| |
SUSE Linux Enterprise Software Development Kit 11 SP4 |
| |
SUSE Linux Enterprise Software Development Kit 12 SP1 |
| |
SUSE Linux Enterprise Software Development Kit 12 SP2 |
| |
SUSE Linux Enterprise Software Development Kit 12 SP3 |
| |
SUSE Linux Enterprise Software Development Kit 12 SP4 |
| |
SUSE Linux Enterprise Software Development Kit 12 SP5 |
| |
SUSE Linux Enterprise Software Development Kit 12 |
| |
openSUSE Leap 15.0 |
| Patchnames: openSUSE Leap 15.0 GA MozillaFirefox |
openSUSE Leap 42.1 |
| Patchnames: openSUSE Leap 42.1 GA MozillaFirefox |
openSUSE Leap 42.2 |
| Patchnames: openSUSE Leap 42.2 GA MozillaFirefox |
openSUSE Leap 42.3 |
| Patchnames: openSUSE Leap 42.3 GA MozillaFirefox |
openSUSE Tumbleweed |
| Patchnames: openSUSE Tumbleweed GA MozillaFirefox |