Vulnerability Details CVE-2010-2420
Multiple unspecified vulnerabilities in Fenrir Inc. ActiveGeckoBrowser 1.0.0 and 1.0.5 alpha, a module for the Sleipnir web browser, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the Gecko engine.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.9%
CVSS Severity
CVSS v2 Score 6.8
References
- http://jvn.jp/en/jp/JVN67120749/index.html
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000025.html
- http://www.fenrir.co.jp/blog/2010/06/activegeckobrowser.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59493
- http://jvn.jp/en/jp/JVN67120749/index.html
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000025.html
- http://www.fenrir.co.jp/blog/2010/06/activegeckobrowser.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59493
Products affected by CVE-2010-2420
-
cpe:2.3:a:fenrir-inc:activegeckobrowser:1.0.0
-
cpe:2.3:a:fenrir-inc:activegeckobrowser:1.0.5
-
cpe:2.3:a:fenrir-inc:sleipnir:2.5.10
-
cpe:2.3:a:fenrir-inc:sleipnir:2.5.11
-
cpe:2.3:a:fenrir-inc:sleipnir:2.5.12
-
cpe:2.3:a:fenrir-inc:sleipnir:2.5.14
-
cpe:2.3:a:fenrir-inc:sleipnir:2.7.2
-
cpe:2.3:a:fenrir-inc:sleipnir:2.8.0
-
cpe:2.3:a:fenrir-inc:sleipnir:2.8.1
-
cpe:2.3:a:fenrir-inc:sleipnir:2.8.2
-
cpe:2.3:a:fenrir-inc:sleipnir:2.8.3