CVE-2004-1200 — Mozilla Firefox vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
1.3%
top 20.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedDec 31
Latest updateApr 29

Description

Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox8 versions+7

🔴Vulnerability Details

1
GHSA
GHSA-cmw5-xxqm-3g4q: Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript↗2022-04-29
▶