ZDI-11-223: Mozilla Firefox SVGPathSegList.replaceItem Remote Code Execution Vulnerability

0
52

Posted by ZDI Disclosures on Jun 21

ZDI-11-223: Mozilla Firefox SVGPathSegList.replaceItem Remote Code Execution Vulnerability

http://www.zerodayinitiative.com/advisories/ZDI-11-223

June 21, 2011

— CVE ID:
CVE-2011-0083

— CVSS:
7.5, (AV:N/AC:L/Au:N/C:P/I:P/A:P)

— Affected Vendors:
Mozilla

— Affected Products:
Mozilla Firefox

— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine protection…

Source: ZDI-11-223: Mozilla Firefox SVGPathSegList.replaceItem Remote Code Execution Vulnerability