CVE-2011-1179

spice-xpi - Use-After-Free in nsScriptablePeer.cpp and plugin.cpp

Title source: llm

Description

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025304

Patch x_refsource_misc

https://bugzilla.redhat.com/attachment.cgi?id=487006&action=diff

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-0426.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-0427.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/66777

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0899

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/44060

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/47269

Patch x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=689931

Scores

EPSS 0.0389

EPSS Percentile 89.0%

Details

CWE

CWE-119

Status published

Products (3)

redhat/spice-xpi 2.2

redhat/spice-xpi 2.3

redhat/spice-xpi 2.4

Published Apr 18, 2011

Tracked Since Feb 18, 2026