Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 垃圾收集功能权限管理和代码执行漏洞
Vulnerability Description
Firefox是Mozilla所发布的开源WEB浏览器 。 Firefox中的多个安全漏洞,由于代码共享,Thunderbird和SeaMonkey也受这些漏洞的影响 。在垃圾收集后元素的所有者文档可能为空,事件处理器可以利用这个漏洞以chrome权限执行任意Javascript代码 。
CVSS Information
N/A
Vulnerability Type
N/A