CVE-2011-2985

Firefox 4.x-5 and SeaMonkey < 2.3 - Remote Code Execution or Denial of Service

Title source: llm

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References (20)

Core 20

Core References

Various Sources x_refsource_confirm

http://www.mozilla.org/security/announce/2011/mfsa2011-31.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=650273

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=650732

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=665518

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=667315

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=651030

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=646825

Various Sources x_refsource_confirm

http://www.mozilla.org/security/announce/2011/mfsa2011-33.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=662132

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14440

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=667092

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=668245

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=648206

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49055

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=650275

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=667512

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=669584

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2011/mfsa2011-29.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=660517

Scores

EPSS 0.0527

EPSS Percentile 91.6%

Details

Status published

Products (20)

mozilla/firefox 4.0 (13 CPE variants)

mozilla/firefox 4.0.1

mozilla/firefox 5.0

mozilla/seamonkey 2.0 (8 CPE variants)

mozilla/seamonkey 2.0.1

mozilla/seamonkey 2.0.2

mozilla/seamonkey 2.0.3

mozilla/seamonkey 2.0.4

mozilla/seamonkey 2.0.5

mozilla/seamonkey 2.0.6

... and 10 more

Published Aug 18, 2011

Tracked Since Feb 18, 2026