Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox XSL解析root XML标签内存破坏漏洞
Vulnerability Description
Firefox是一款非常流行的开放源码WEB浏览器。 Firefox在转换XML文档时没有正确地处理出错情况，特制的XSLT代码可能导致将临时的被破坏栈变量处理为评估上下文对象。漏洞的起因是evalContext是栈分配的，但在失败的情况下仍被txExecutionState对象引用，该对象的释放器之后又试图删除evalContext。成功利用这个漏洞的攻击者可能导致浏览器崩溃或在用户机器上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A