CVE-2020-9545
HIGHPale Moon 28.0-28.8.3 - Denial of Service via Module Scripting
Title source: llmDescription
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://forum.palemoon.org/viewtopic.php?f=37&t=23864
Release Notes, Vendor Advisory x_refsource_misc
http://www.palemoon.org/releasenotes.shtml
Scores
CVSS v3
7.5
EPSS
0.0132
EPSS Percentile
67.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (1)
palemoon/pale_moon
28.0 - 28.8.4
Published
Mar 02, 2020
Tracked Since
Feb 18, 2026