Lucene search

[email protected]NVD:CVE-2011-3660

HistoryDec 21, 2011 - 4:02 a.m.

CVE-2011-3660

2011-12-2104:02:00

[email protected]

web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.243 Low

EPSS

Percentile

96.6%

JSON

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.

Affected configurations

NVD

Node

mozillafirefoxMatch4.0

mozillafirefoxMatch4.0beta1

mozillafirefoxMatch4.0beta10

mozillafirefoxMatch4.0beta11

mozillafirefoxMatch4.0beta12

mozillafirefoxMatch4.0beta2

mozillafirefoxMatch4.0beta3

mozillafirefoxMatch4.0beta4

mozillafirefoxMatch4.0beta5

mozillafirefoxMatch4.0beta6

mozillafirefoxMatch4.0beta7

mozillafirefoxMatch4.0beta8

mozillafirefoxMatch4.0beta9

mozillafirefoxMatch4.0.1

mozillafirefoxMatch5.0

mozillafirefoxMatch5.0.1

mozillafirefoxMatch6.0

mozillafirefoxMatch6.0.1

mozillafirefoxMatch6.0.2

mozillafirefoxMatch7.0

mozillafirefoxMatch7.0.1

mozillafirefoxMatch8.0

mozillaseamonkeyRange≤2.5

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0alpha

mozillaseamonkeyMatch1.0beta

mozillaseamonkeyMatch1.0dev

mozillaseamonkeyMatch1.0alpha

mozillaseamonkeyMatch1.0beta

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.4

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.0.99

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1alpha

mozillaseamonkeyMatch1.1beta

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.51.1.10

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillaseamonkeyMatch1.1.14

mozillaseamonkeyMatch1.1.15

mozillaseamonkeyMatch1.1.16

mozillaseamonkeyMatch1.1.17

mozillaseamonkeyMatch1.1.18

mozillaseamonkeyMatch1.1.19

mozillaseamonkeyMatch1.5.0.8

mozillaseamonkeyMatch1.5.0.9

mozillaseamonkeyMatch1.5.0.10

mozillaseamonkeyMatch2.0

mozillaseamonkeyMatch2.0alpha_1

mozillaseamonkeyMatch2.0alpha_2

mozillaseamonkeyMatch2.0alpha_3

mozillaseamonkeyMatch2.0beta_1

mozillaseamonkeyMatch2.0beta_2

mozillaseamonkeyMatch2.0rc1

mozillaseamonkeyMatch2.0rc2

mozillaseamonkeyMatch2.0.1

mozillaseamonkeyMatch2.0.2

mozillaseamonkeyMatch2.0.3

mozillaseamonkeyMatch2.0.4

mozillaseamonkeyMatch2.0.5

mozillaseamonkeyMatch2.0.6

mozillaseamonkeyMatch2.0.7

mozillaseamonkeyMatch2.0.8

mozillaseamonkeyMatch2.0.9

mozillaseamonkeyMatch2.0.10

mozillaseamonkeyMatch2.0.11

mozillaseamonkeyMatch2.0.12

mozillaseamonkeyMatch2.0.13

mozillaseamonkeyMatch2.0.14

mozillaseamonkeyMatch2.0a1pre

mozillaseamonkeyMatch2.1alpha1

mozillaseamonkeyMatch2.1alpha2

mozillaseamonkeyMatch2.1alpha3

mozillaseamonkeyMatch2.3.3

mozillathunderbirdMatch5.0

mozillathunderbirdMatch6.0

mozillathunderbirdMatch6.0.1

mozillathunderbirdMatch6.0.2

mozillathunderbirdMatch7.0

mozillathunderbirdMatch7.0.1

mozillathunderbirdMatch8.0

References

lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html

lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html

osvdb.org/77952

secunia.com/advisories/47302

secunia.com/advisories/47334

secunia.com/advisories/49055

www.mandriva.com/security/advisories?name=MDVSA-2011:192

www.mozilla.org/security/announce/2011/mfsa2011-53.html

www.securitytracker.com/id?1026445

www.securitytracker.com/id?1026446

www.securitytracker.com/id?1026447

bugzilla.mozilla.org/show_bug.cgi?id=562442

bugzilla.mozilla.org/show_bug.cgi?id=679494

bugzilla.mozilla.org/show_bug.cgi?id=679986

bugzilla.mozilla.org/show_bug.cgi?id=680687

bugzilla.mozilla.org/show_bug.cgi?id=682252

bugzilla.mozilla.org/show_bug.cgi?id=685186

bugzilla.mozilla.org/show_bug.cgi?id=685321

bugzilla.mozilla.org/show_bug.cgi?id=686107

bugzilla.mozilla.org/show_bug.cgi?id=688364

bugzilla.mozilla.org/show_bug.cgi?id=688974

bugzilla.mozilla.org/show_bug.cgi?id=689892

bugzilla.mozilla.org/show_bug.cgi?id=690376

bugzilla.mozilla.org/show_bug.cgi?id=691746

bugzilla.mozilla.org/show_bug.cgi?id=691873

bugzilla.mozilla.org/show_bug.cgi?id=693143

bugzilla.mozilla.org/show_bug.cgi?id=693144

bugzilla.mozilla.org/show_bug.cgi?id=694200

bugzilla.mozilla.org/show_bug.cgi?id=696579

bugzilla.mozilla.org/show_bug.cgi?id=697255

bugzilla.mozilla.org/show_bug.cgi?id=700512

bugzilla.mozilla.org/show_bug.cgi?id=701248

bugzilla.mozilla.org/show_bug.cgi?id=701637

bugzilla.mozilla.org/show_bug.cgi?id=706249

exchange.xforce.ibmcloud.com/vulnerabilities/71908

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14226

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.243 Low

EPSS

Percentile

96.6%

JSON

Related for NVD:CVE-2011-3660

openvas21 mozilla1 cve1 cvelist1 ubuntucve1 prion1 freebsd1 suse4 ubuntu3 nessus20 securityvulns1 gentoo1