Nom de la faiblesse | Source | |
---|---|---|
Improper Control of Generation of Code ('Code Injection') The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. |
Metric | Score | Sévérité | CVSS Vecteur | Source |
---|---|---|---|---|
V2 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P | [email protected] |
Mozilla>>Firefox >> Version 3.6.1
Mozilla>>Firefox >> Version 3.6.2
Mozilla>>Firefox >> Version 3.6.3
Mozilla>>Firefox >> Version 3.6.4
Mozilla>>Firefox >> Version 3.6.6
Mozilla>>Thunderbird >> Version 3.1