Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-3658
HistoryDec 20, 2011 - 12:00 a.m.

CVE-2011-3658

2011-12-2000:00:00
ubuntu.com
ubuntu.com
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON

The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and
SeaMonkey 2.5 does not properly interact with DOMAttrModified event
handlers, which allows remote attackers to cause a denial of service
(out-of-bounds memory access) or possibly have unspecified other impact via
vectors involving removal of SVG elements.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox<Β 9.0.1+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox<Β 9.0.1+build1-0ubuntu0.11.10.2UNKNOWN
ubuntuupstreamnoarchfirefox<Β anyUNKNOWN
ubuntuupstreamnoarchseamonkey<Β anyUNKNOWN
ubuntu10.04noarchthunderbird<Β 3.1.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird<Β 3.1.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird<Β 3.1.20+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird<Β 9.0+build2-0ubuntu0.11.10.1UNKNOWN
ubuntuupstreamnoarchthunderbird<Β 9.0UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2<Β 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
Rows per page:
1-10 of 141

Related

openvas 25
prion 1
mozilla 1
cvelist 1
checkpoint_advisories 1
saint 4
canvas 1
packetstorm 1
seebug 1
nvd 1
cve 1
zdi 1
nessus 23
freebsd 1
ubuntu 5
suse 4
securityvulns 1
gentoo 1
openvas
openvas
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (MAC OS X)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (Windows)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Windows
2011-12-22 00:00:00
prion
prion
Out-of-bounds
2011-12-21 04:02:00
mozilla
mozilla
nsSVGValue out-of-bounds access β€” Mozilla
2011-12-20 00:00:00
cvelist
cvelist
CVE-2011-3658
2011-12-21 02:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Thunderbird SeaMonkey nsSVGValue Memory Corruption (CVE-2011-3658)
2013-03-20 00:00:00
saint
saint
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_NSSVGVALUE
2011-12-21 04:02:00
packetstorm
packetstorm
Mozilla Firefox 7 / 8 Out-Of-Bounds Access
2012-05-08 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyθΆŠη•Œε†…ε­˜η ΄εζΌζ΄ž
2011-12-21 00:00:00
nvd
nvd
CVE-2011-3658
2011-12-21 04:02:00
cve
cve
CVE-2011-3658
2011-12-21 04:02:00
zdi
zdi
Mozilla Firefox nsSVGValue Out-of-Bounds Access Remote Code Execution Vulnerability
2012-04-09 00:00:00
nessus
nessus
Ubuntu 11.04 / 11.10 : firefox vulnerabilities (USN-1306-1)
2012-01-09 00:00:00
Mandriva Linux Security Advisory : mozilla (MDVSA-2011:192)
2012-09-06 00:00:00
Ubuntu 11.10 : thunderbird vulnerabilities (USN-1343-1)
2012-01-25 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-12-20 00:00:00
ubuntu
ubuntu
Mozvoikko and ubufox update
2012-01-06 00:00:00
Firefox vulnerabilities
2012-01-06 00:00:00
Thunderbird vulnerabilities
2012-01-24 00:00:00
suse
suse
seamonkey (important)
2012-01-05 12:08:18
seamonkey (important)
2012-01-05 12:35:43
MozillaFirefox (important)
2012-02-09 19:09:53
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-01-02 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON
Related for UB:CVE-2011-3658
openvas25prion1mozilla1cvelist1checkpoint_advisories1saint4canvas1packetstorm1seebug1nvd1cve1zdi1nessus23freebsd1ubuntu5suse4securityvulns1gentoo1