Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox插件参数引用悬停指针漏洞
Vulnerability Description
Firefox是一款非常流行的开源WEB浏览器。 Firefox的插件处理器中存在无效释放漏洞，在某些情况下可能过早的释放插件例程中的参数数组内存，留下插件可执行的悬停指针，可能会调用攻击者所控制的内存。用户受骗访问恶意的web内容可能导致释放无效的内存指针，Firefox可能会崩溃或以运行Firefox用户的权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A