Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-hm8u-e2tf-cuhv |
| Summary | Using the Address Sanitizer tool, security researcher Atte
Kettunen from OUSPG discovered a use-after-free in Web Audio due to an
issue with how control messages for Web Audio are ordered and processed. This
leads to a potentially exploitable crash.
In general this flaw cannot be exploited through email in the
Thunderbird product because scripting is disabled, but is potentially a risk in
browser or browser-like contexts. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 7.0 - 8.9 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-hm8u-e2tf-cuhv |