Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2011-3658
HistoryDec 21, 2011 - 4:02 a.m.

Out-of-bounds

2011-12-2104:02:00
PRIOn knowledge base
www.prio-n.com
8

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON

The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.

CPENameOperatorVersion
firefoxeq8.0
seamonkeyeq2.5
thunderbirdeq8.0

References

Related

openvas 25
mozilla 1
cvelist 1
packetstorm 1
seebug 1
nvd 1
cve 1
saint 4
zdi 1
checkpoint_advisories 1
canvas 1
ubuntucve 1
freebsd 1
ubuntu 5
suse 4
nessus 23
securityvulns 1
gentoo 1
openvas
openvas
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (MAC OS X)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (Windows)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Windows
2011-12-22 00:00:00
mozilla
mozilla
nsSVGValue out-of-bounds access β€” Mozilla
2011-12-20 00:00:00
cvelist
cvelist
CVE-2011-3658
2011-12-21 02:00:00
packetstorm
packetstorm
Mozilla Firefox 7 / 8 Out-Of-Bounds Access
2012-05-08 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyθΆŠη•Œε†…ε­˜η ΄εζΌζ΄ž
2011-12-21 00:00:00
nvd
nvd
CVE-2011-3658
2011-12-21 04:02:00
cve
cve
CVE-2011-3658
2011-12-21 04:02:00
saint
saint
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
zdi
zdi
Mozilla Firefox nsSVGValue Out-of-Bounds Access Remote Code Execution Vulnerability
2012-04-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Thunderbird SeaMonkey nsSVGValue Memory Corruption (CVE-2011-3658)
2013-03-20 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_NSSVGVALUE
2011-12-21 04:02:00
ubuntucve
ubuntucve
CVE-2011-3658
2011-12-20 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-12-20 00:00:00
ubuntu
ubuntu
Mozvoikko and ubufox update
2012-01-06 00:00:00
Firefox vulnerabilities
2012-01-06 00:00:00
Thunderbird vulnerabilities
2012-01-24 00:00:00
suse
suse
seamonkey (important)
2012-01-05 12:08:18
seamonkey (important)
2012-01-05 12:35:43
MozillaFirefox (important)
2012-02-09 19:09:53
nessus
nessus
Ubuntu 11.10 : thunderbird vulnerabilities (USN-1343-1)
2012-01-25 00:00:00
FreeBSD : mozilla -- multiple vulnerabilities (e3ff776b-2ba6-11e1-93c6-0011856a6e37)
2011-12-21 00:00:00
openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)
2014-06-13 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-01-02 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON
Related for PRION:CVE-2011-3658
openvas25mozilla1cvelist1packetstorm1seebug1nvd1cve1saint4zdi1checkpoint_advisories1canvas1ubuntucve1freebsd1ubuntu5suse4nessus23securityvulns1gentoo1