Description

The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.

Remediation

References

CVE-2013-3969

Related Vulnerabilities

WordPress Plugin WooCommerce Admin Security Bypass (2.6.3)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3512)

WordPress Plugin Elementor Addon Elements Cross-Site Request Forgery (1.6.3)

WordPress Plugin WordPress Backup and Migrate-Backup Guard Multiple Unspecified Vulnerabilities (1.1.32)

WordPress Plugin Easy Org Chart Cross-Site Scripting (3.1)

Severity

Medium

Classification

CVE-2013-3969

Tags

Missing Update Known Vulnerabilities