Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/Thunderbird/Seamonkey多个远程安全漏洞
Vulnerability Description
Mozilla Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。 上述产品中存在多个安全漏洞,具体如下: 包含有最小量词的JavaScript正则表达式可能触发堆溢出,导致拒绝服务。 在非终止字符组中以反斜线结尾(如"[\\")的正则表达式可能导致引擎读取缓冲区以外的数据,造成崩溃。 Firefox和Thunderbird的自动更新机制使用SSL防范DNS欺骗,仅有提供了aus2.mozilla.org有效证书的站点才应被信任为更新信息
CVSS Information
N/A
Vulnerability Type
N/A