2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Firefox","vendor":"Mozilla","versions":[{"lessThan":"125","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@mozilla.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"7334A1C6-C6BF-4C70-ADF1-736BCE0EA227","versionEndExcluding":"125.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox < 125."},{"lang":"es","value":"Una condición de falta de memoria durante la inicialización del objeto podría dar como resultado una lista de formas vacía. Si el JIT posteriormente rastreara el objeto, éste se estrellaría. Esta vulnerabilidad afecta a Firefox < 125."}],"id":"CVE-2024-3860","lastModified":"2026-06-17T07:45:18.580","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3860","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-07-30T19:52:58.283808Z","version":"2.0.3"}}]},"published":"2024-04-16T16:15:08.713","references":[{"source":"security@mozilla.org","tags":["Issue Tracking"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1881417"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2024-18/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1881417"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2024-18/"}],"sourceIdentifier":"security@mozilla.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-401"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|