Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-scmh-n3kp-yqas |
| Summary | Security researcher regenrecht reported via
TippingPoint's Zero Day Initiative that removed child nodes of nsDOMAttribute
can be accessed under certain circumstances because of a premature notification
of AttributeChildRemoved. This use-after-free of the child nodes could possibly
allow for remote code execution. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 9.0 - 10.0 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-scmh-n3kp-yqas |