OSVDB ID: 84997 Title: Mozilla Multiple Product XSLT Format-Number Feature Out-of-bounds Read Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Multiple Mozilla products contain a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an out-of-bounds read error occurs in the format-number feature of XSLT, which will disclose potentially sensitive information to a remote attacker. |
Classification |
Location:
Context Dependent
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Upgrade Exploit: Exploit Private Disclosure: Vendor Verified, Coordinated Disclosure OSVDB: Web Related |
Solution |
Upgrade Firefox and Thunderbird to version 15 or higher (10.0.7 for ESR) or SeaMonkey to version 2.12 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
Credit |
Unknown or Incomplete |