CVE-2011-2982

Firefox < 3.6.20 - Remote Code Execution or Denial of Service

Title source: llm

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References (18)

Core 18

Core References

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2011:127

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2011/mfsa2011-30.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14294

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2011/dsa-2297

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=674545

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=643062

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2011/dsa-2296

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-1166.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025940

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-1164.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=632206

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=541255

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-1165.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=615970

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2011/dsa-2295

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-1167.html

Scores

EPSS 0.0526

EPSS Percentile 91.6%

Details

Status published

Products (47)

mozilla/firefox 1.0 (2 CPE variants)

mozilla/firefox 1.0.1

mozilla/firefox 1.0.2

mozilla/firefox 1.0.3

mozilla/firefox 1.0.4

mozilla/firefox 1.0.5

mozilla/firefox 1.0.6

mozilla/firefox 1.0.7

mozilla/firefox 1.0.8

mozilla/firefox 1.5 (3 CPE variants)

... and 37 more

Published Aug 18, 2011

Tracked Since Feb 18, 2026