Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla SOAPParameter构造器远程整数溢出漏洞
Vulnerability Description
Netscape/Mozilla是流行的WEB浏览器。 Netscape/Mozilla中的SOAPParameter对象构造器不正确输入验证,远程攻击者可以利用这个漏洞进行整数溢出攻击,可能以用户进程权限在系统上执行任意指令。 问题存在于Netscape/Mozilla处理SOAP XML参数过程中,由于SOAPParameter对象构造器存在一个整数溢出,攻击者可以精心构建HTML文件,诱使目标用户解析,可能触发基于堆的溢出,以用户进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A