Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2011-0084
HistoryAug 18, 2011 - 6:55 p.m.

Session fixation

2011-08-1818:55:00
PRIOn knowledge base
www.prio-n.com
10

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.8 High

EPSS

Percentile

98.2%

JSON

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a “dangling pointer.”

Related

veracode 1
ubuntucve 1
checkpoint_advisories 2
openvas 54
cve 1
cvelist 1
securityvulns 2
zdi 1
nessus 43
oraclelinux 2
redhat 2
osv 3
debian 4
ubuntu 5
centos 1
suse 7
mozilla 5
seebug 1
freebsd 1
gentoo 1
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:01:37
ubuntucve
ubuntucve
CVE-2011-0084
2011-08-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084)
2012-01-03 00:00:00
Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084)
2012-01-03 00:00:00
openvas
openvas
Mozilla Products 'SVG' Code Execution Vulnerability (Windows)
2011-09-09 00:00:00
Mozilla Products 'SVG' Code Execution Vulnerability - Windows
2011-09-09 00:00:00
RedHat Update for thunderbird RHSA-2011:1166-01
2012-07-09 00:00:00
cve
cve
CVE-2011-0084
2011-08-18 18:55:00
cvelist
cvelist
CVE-2011-0084
2011-08-18 18:00:00
securityvulns
securityvulns
ZDI-11-270: Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability
2011-08-18 00:00:00
Mozilla Fireox / Seamonkey / Thunderbird multiple security vulnerabilities
2011-08-19 00:00:00
zdi
zdi
Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability
2011-08-17 00:00:00
nessus
nessus
RHEL 6 : thunderbird (RHSA-2011:1166)
2011-08-17 00:00:00
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64
2012-08-01 00:00:00
Oracle Linux 6 : thunderbird (ELSA-2011-1166)
2013-07-12 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2011-08-16 00:00:00
firefox security update
2011-08-16 00:00:00
redhat
redhat
(RHSA-2011:1166) Critical: thunderbird security update
2011-08-16 00:00:00
(RHSA-2011:1164) Critical: firefox security update
2011-08-16 00:00:00
osv
osv
icedove - several
2011-08-21 00:00:00
iceape - several
2011-08-17 00:00:00
iceweasel - several
2011-08-17 00:00:00
debian
debian
[BSA-046] Security Update for icedove
2011-09-01 07:06:17
[SECURITY] [DSA 2297-1] icedove security update
2011-08-21 19:15:08
[SECURITY] [DSA 2296-1] iceweasel security update
2011-08-17 19:30:11
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2011-08-19 00:00:00
Thunderbird vulnerabilities
2011-08-26 00:00:00
Libvoikko regression
2011-10-19 00:00:00
centos
centos
firefox, xulrunner security update
2011-08-16 23:27:06
suse
suse
Security update for Mozilla Firefox (important)
2011-08-29 21:08:22
MozillaThunderbird: Update to 3.1.12 (important)
2011-08-29 20:08:38
MozillaFirefox: Update to Firefox 3.6.20 (important)
2011-08-26 20:08:19
mozilla
mozilla
Security issues addressed in Thunderbird 3.1.12 — Mozilla
2011-08-16 00:00:00
Security issues addressed in Firefox 3.6.20 — Mozilla
2011-08-16 00:00:00
Security issues addressed in Thunderbird 6 — Mozilla
2011-08-16 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkey多个安全漏洞
2011-08-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.8 High

EPSS

Percentile

98.2%

JSON
Related for PRION:CVE-2011-0084
veracode1ubuntucve1checkpoint_advisories2openvas54cve1cvelist1securityvulns2zdi1nessus43oraclelinux2redhat2osv3debian4ubuntu5centos1suse7mozilla5seebug1freebsd1gentoo1