Lucene search
HistoryJun 30, 2011 - 4:55 p.m.
CVE-2011-2368
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.039
Percentile
92.0%
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Affected configurations
Node
mozillafirefoxMatch4.0
ORmozillafirefoxMatch4.0beta1
ORmozillafirefoxMatch4.0beta10
ORmozillafirefoxMatch4.0beta11
ORmozillafirefoxMatch4.0beta12
ORmozillafirefoxMatch4.0beta2
ORmozillafirefoxMatch4.0beta3
ORmozillafirefoxMatch4.0beta4
ORmozillafirefoxMatch4.0beta5
ORmozillafirefoxMatch4.0beta6
ORmozillafirefoxMatch4.0beta7
ORmozillafirefoxMatch4.0beta8
ORmozillafirefoxMatch4.0beta9
ORmozillafirefoxMatch4.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* |
| mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2011-2368
2011-06-30 16:00:00
prion
prion
Design/Logic Flaw
2011-06-30 16:55:00
cve
cve
CVE-2011-2368
2011-06-30 16:55:05
ubuntucve
ubuntucve
CVE-2011-2368
2011-06-24 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2011-26) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities (Jul 2011) - Windows
2011-07-07 00:00:00
Mozilla Firefox Multiple Vulnerabilities July-11 (Windows)
2011-07-07 00:00:00
mozilla
mozilla
Multiple WebGL crashes — Mozilla
2011-06-21 00:00:00
ubuntu
ubuntu
Firefox regression
2011-06-23 00:00:00
mozvoikko, ubufox, webfav update
2011-06-22 00:00:00
Firefox vulnerabilities
2011-06-22 00:00:00
nessus
nessus
SeaMonkey < 2.2.0 Multiple Vulnerabilities
2011-08-17 00:00:00
Ubuntu 11.04 : firefox vulnerabilities (USN-1157-1)
2011-06-23 00:00:00
Ubuntu 11.04 : firefox regression (USN-1157-3)
2011-06-24 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird
2011-07-05 17:43:33
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-06-23 00:00:00
osv
osv
MozillaFirefox-50.1.0-1.1 on GA media
2024-06-15 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.039
Percentile
92.0%
Related for NVD:CVE-2011-2368