Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Browser Script.prototype.freeze/thaw任意代码执行漏洞
Vulnerability Description
Mozilla是一款流行的WEB浏览器。 Mozilla在处理JavaScript Script.prototype.freeze/thaw函数时存在问题，远程攻击者可以利用这个漏洞构建恶意WEB页面，诱使用户访问，可以当前用户上下文权限执行任意代码。 Mozilla在处理JavaScript Script.prototype.freeze/thaw函数时，对其输入的字符串缺少正确检查和过滤，攻击者构建恶意页面，诱使Mozilla用户访问，可导致任意代码在客户端系统中执行。
CVSS Information
N/A
Vulnerability Type
N/A