CVE-2010-2420: Medium severity active gecko browser vulnerability
Published Jun 22, 2010
·Updated
Multiple unspecified vulnerabilities in Fenrir Inc. ActiveGeckoBrowser 1.0.0 and 1.0.5 alpha, a module for the Sleipnir web browser, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the Gecko engine.
Affected Software
11 affected components
Fenrir-inc Activegeckobrowser=1.0.0
Fenrir-inc Activegeckobrowser=1.0.5-alpha
Fenrir-inc Sleipnir=2.5.10
Fenrir-inc Sleipnir=2.5.11
Fenrir-inc Sleipnir=2.5.12
Fenrir-inc Sleipnir=2.5.14
Fenrir-inc Sleipnir=2.7.2
Fenrir-inc Sleipnir=2.8.0
Fenrir-inc Sleipnir=2.8.1
Fenrir-inc Sleipnir=2.8.2
Fenrir-inc Sleipnir=2.8.3
Event History
Jun 22, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker may be able to trigger the vulnerabilities over the network. The available data does not identify the specific attack vector or user interaction required.
2
Which versions are known to be affected?
The affected versions listed are ActiveGeckoBrowser 1.0.0 and 1.0.5 alpha, a module for the Sleipnir web browser.
3
What is the potential impact?
Successful exploitation may cause a crash and could possibly allow arbitrary code execution, affecting confidentiality, integrity, and availability.