Description

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.

Remediation

References

CVE-2013-1892

Related Vulnerabilities

WordPress Plugin WP People 'wp-people-popup.php' SQL Injection (2.0)

WordPress Plugin Affiliates Manager Multiple Vulnerabilities (2.9.13)

WordPress Plugin My Tickets Security Bypass (1.9.11)

WordPress Plugin 301 Redirects-Easy Redirect Manager SQL Injection (2.50)

MySQL CVE-2024-20971 Vulnerability (CVE-2024-20971)

Severity

Medium

Classification

CVE-2013-1892 CWE-20

Tags

Missing Update Known Vulnerabilities