CVE-2011-3654

2011-11-0900:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.08 Low

EPSS

Percentile

94.1%

JSON

The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0
does not properly handle links from SVG mpath elements to non-SVG elements,
which allows remote attackers to cause a denial of service (memory
corruption and application crash) or possibly execute arbitrary code via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox< 8.0+build1-0ubuntu0.11.04.3UNKNOWN
ubuntu11.10noarchfirefox< 8.0+build1-0ubuntu0.11.10.3UNKNOWN
ubuntuupstreamnoarchfirefox< anyUNKNOWN
ubuntuupstreamnoarchseamonkey< anyUNKNOWN
ubuntu11.10noarchthunderbird< 8.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntuupstreamnoarchthunderbird< anyUNKNOWN
ubuntuupstreamnoarchxulrunner-1.9.2< anyUNKNOWN
ubuntuupstreamnoarchxulrunner-2.0< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	firefox	< 8.0+build1-0ubuntu0.11.04.3	UNKNOWN
ubuntu	11.10	noarch	firefox	< 8.0+build1-0ubuntu0.11.10.3	UNKNOWN
ubuntu	upstream	noarch	firefox	< any	UNKNOWN
ubuntu	upstream	noarch	seamonkey	< any	UNKNOWN
ubuntu	11.10	noarch	thunderbird	< 8.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	upstream	noarch	thunderbird	< any	UNKNOWN
ubuntu	upstream	noarch	xulrunner-1.9.2	< any	UNKNOWN
ubuntu	upstream	noarch	xulrunner-2.0	< any	UNKNOWN