Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/Thunderbird/SeaMonkey Flash文件上传检查控制漏洞
Vulnerability Description
当Flash模块已经被动态上传时，Firefox 和SeaMonkey没有对它进行正确的检查，这使得远程攻击者可以借助一个特制的SWF文件，执行任意代码。该WSF文件可以"从一个外部的JavaScript函数中动态的上传它自己"，而这会触发对过期的内存地址的访问。
CVSS Information
N/A
Vulnerability Type
N/A