Description
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.
Remediation
References
Related Vulnerabilities
MySQL Use After Free Vulnerability (CVE-2017-3302)
Apache HTTP Server CVE-2007-3304 Vulnerability (CVE-2007-3304)
WordPress Plugin Easy2Map Multiple SQL Injection Vulnerabilities (1.2.4)
WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.4)
Jetty Improper Input Validation Vulnerability (CVE-2022-2047)