Mozilla FoundationMFSA2011-12Miscellaneous memory safety hazards (rv:2.0.1/ 1.9.2.17/ 1.9.1.19) — Mozilla
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.598 Medium
EPSS
Percentile
97.7%
Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0069
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0070
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0072
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0074
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0075
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0077
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0078
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0079
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0080
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0081
bugzilla.mozilla.org/buglist.cgi?bug_id=638236,634257,637621,637957,615147
bugzilla.mozilla.org/buglist.cgi?bug_id=642717,639343,639728,643649,641388,601102,639885
bugzilla.mozilla.org/buglist.cgi?bug_id=645289
bugzilla.mozilla.org/show_bug.cgi?id=619021
bugzilla.mozilla.org/show_bug.cgi?id=623998
bugzilla.mozilla.org/show_bug.cgi?id=624187
bugzilla.mozilla.org/show_bug.cgi?id=635705
bugzilla.mozilla.org/show_bug.cgi?id=635977
bugzilla.mozilla.org/show_bug.cgi?id=644069
bugzilla.mozilla.org/show_bug.cgi?id=645565
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.598 Medium
EPSS
Percentile
97.7%