CVE-2011-3003

Mozilla Firefox < 7.0 and SeaMonkey < 2.4 - Memory Corruption via WebGL

Title source: llm
STIX 2.1

Description

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation.

References (4)

Core 4
Core References
Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=682335
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:141

Scores

EPSS 0.0423
EPSS Percentile 89.8%

Details

CWE
CWE-119
Status published
Products (2)
mozilla/firefox < 7.0
mozilla/seamonkey < 2.4
Published Sep 29, 2011
Tracked Since Feb 18, 2026