Arbitrary Code Execution via Dangling Pointer in SVGTextElement.getCharNumAtPosition
CVE-2011-0084 · HIGH Severity
AV:N/AC:L/AU:N/C:C/I:C/A:C
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Learn more about our Cis Benchmark Audit For Mozilla Firefox.