Mozilla FoundationMFSA2011-19

HistoryJun 21, 2011 - 12:00 a.m.

Miscellaneous memory safety hazards (rv:3.0/1.9.2.18) — Mozilla

2011-06-2100:00:00

Mozilla Foundation

www.mozilla.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.48 Medium

EPSS

Percentile

97.5%

JSON

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Affected configurations

Vulners

Node

mozillafirefoxRange<3.6.18

mozillafirefoxRange<5

mozillaseamonkeyRange<2.2

mozillathunderbirdRange<3.1.11

CPENameOperatorVersion
firefoxlt3.6.18
firefoxlt5
seamonkeylt2.2
thunderbirdlt3.1.11

Name	Operator	Version
firefox	lt	3.6.18
firefox	lt	5
seamonkey	lt	2.2
thunderbird	lt	3.1.11

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2364

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2365

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2374

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2375

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2376

bugzilla.mozilla.org/buglist.cgi?bug_id=642734,642338,639648,646662,645572,629858,626262,643051

bugzilla.mozilla.org/buglist.cgi?bug_id=648705,643927,654015,653238,653026,652401,643839,597162,648022

bugzilla.mozilla.org/buglist.cgi?bug_id=650874,635235

bugzilla.mozilla.org/show_bug.cgi?id=651990

bugzilla.mozilla.org/show_bug.cgi?id=655742

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.48 Medium

EPSS

Percentile

97.5%

JSON

Related for MFSA2011-19