Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-k74j-d2aa-1qc2 |
| Summary | Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a garbage collection flaw in Javascript Proxy objects. This can lead to a use-after-free leading to arbitrary code execution.
In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 9.0 - 10.0 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-k74j-d2aa-1qc2 |