Lucene search

K
nessusTenable6010.PRM
HistoryAug 18, 2011 - 12:00 a.m.

Mozilla Thunderbird < 6.0 Multiple Vulnerabilities

2011-08-1800:00:00
Tenable
www.tenable.com
21

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.802

Percentile

98.4%

Versions of Mozilla Thunderbird prior to 6.0 are affected by the following vulnerabilities :

  • Several memory safety bugs exist in the browser engine that may permit remote code execution. (CVE-2011-2985, CVE-2011-2989, CVE-2011-2991, CVE-2011-2992)
  • A dangling pointer vulnerability exists in an SVG text manipulation routine. (CVE-2011-0084)
  • A buffer overflow vulnerability exists in WebGL when using an overly long shader program. (CVE-2011-2988)
  • A heap overflow vulnerability exists in WebGLโ€™s ANGLE library. (CVE-2011-2987)
  • A cross-origin data theft vulnerability exists when using canvas and Windows D2D hardware acceleration. (CVE-2011-2986)
Binary data 6010.prm

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.802

Percentile

98.4%