Out-of-bounds read In nss
Description
The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:4.7.3-2.el5 | ||
rpm rhel5 | 0:3.12.2.0-2.el5 | ||
rpm rhel5 | 0:3.0.5-1.el5_2 | ||
rpm rhel5 | 0:2.0.0.19-1.el5_2 | ||
rpm rhel5 | 0:1.9.0.5-1.el5_2 |
Aliases
1. 2. 3.