Lucene search
Ubuntu.comUB:CVE-2011-3658HistoryDec 20, 2011 - 12:00 a.m.
CVE-2011-3658
2011-12-2000:00:00
ubuntu.com
ubuntu.com
8
0.955 High
EPSS
Percentile
99.4%
The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and
SeaMonkey 2.5 does not properly interact with DOMAttrModified event
handlers, which allows remote attackers to cause a denial of service
(out-of-bounds memory access) or possibly have unspecified other impact via
vectors involving removal of SVG elements.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.04 | noarch | firefox | <Β 9.0.1+build1-0ubuntu0.11.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | <Β 9.0.1+build1-0ubuntu0.11.10.2 | UNKNOWN |
| ubuntu | upstream | noarch | firefox | <Β any | UNKNOWN |
| ubuntu | upstream | noarch | seamonkey | <Β any | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | <Β 3.1.20+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | thunderbird | <Β 3.1.20+build1+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | thunderbird | <Β 3.1.20+build1+nobinonly-0ubuntu0.11.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | thunderbird | <Β 9.0+build2-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | upstream | noarch | thunderbird | <Β 9.0 | UNKNOWN |
| ubuntu | 10.04 | noarch | xulrunner-1.9.2 | <Β 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
References
www.mozilla.org/security/announce/2011/mfsa2011-55.html
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3658
launchpad.net/bugs/cve/CVE-2011-3658
nvd.nist.gov/vuln/detail/CVE-2011-3658
security-tracker.debian.org/tracker/CVE-2011-3658
ubuntu.com/security/notices/USN-1306-1
ubuntu.com/security/notices/USN-1343-1
ubuntu.com/security/notices/USN-1401-1
ubuntu.com/security/notices/USN-1401-2
Related
openvas
openvas
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (MAC OS X)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (Windows)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Mac OS X
2011-12-22 00:00:00
prion
prion
Out-of-bounds
2011-12-21 04:02:00
cvelist
cvelist
CVE-2011-3658
2011-12-21 02:00:00
mozilla
mozilla
nsSVGValue out-of-bounds access β Mozilla
2011-12-20 00:00:00
cve
cve
CVE-2011-3658
2011-12-21 04:02:00
packetstorm
packetstorm
Mozilla Firefox 7 / 8 Out-Of-Bounds Access
2012-05-08 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyθΆηε
εη ΄εζΌζ΄
2011-12-21 00:00:00
nvd
nvd
CVE-2011-3658
2011-12-21 04:02:00
canvas
canvas
Immunity Canvas: FIREFOX_NSSVGVALUE
2011-12-21 04:02:00
saint
saint
checkpoint_advisories
checkpoint_advisories
zdi
zdi
nessus
nessus
Ubuntu 11.04 / 11.10 : firefox vulnerabilities (USN-1306-1)
2012-01-09 00:00:00
Mandriva Linux Security Advisory : mozilla (MDVSA-2011:192)
2012-09-06 00:00:00
openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)
2014-06-13 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-12-20 00:00:00
suse
suse
seamonkey (important)
2012-01-05 12:08:18
MozillaFirefox (important)
2012-02-09 19:09:53
seamonkey (important)
2012-01-05 12:35:43
ubuntu
ubuntu
Mozvoikko and ubufox update
2012-01-06 00:00:00
Firefox vulnerabilities
2012-01-06 00:00:00
Thunderbird vulnerabilities
2012-01-24 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-01-02 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00