CVE-2011-2985 — Out-of-bounds Write in Mozilla Thunderbird

6 documents4 sources
Severity
10.0CRITICALNVD
EPSS
6.7%
top 8.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla ThunderbirdMozilla FirefoxMozilla Seamonkey
Timeline
PublishedAug 18
Latest updateMay 17

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox4.0, 4.0.1, 5.0+2
▶NVDmozilla/seamonkey17 versions+16

🔴Vulnerability Details

2
GHSA
GHSA-2fcq-5g6c-rqrj: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4↗2022-05-17
▶
CVEList
CVE-2011-2985: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4↗2011-08-18
▶

📋Vendor Advisories

3
Ubuntu
Libvoikko regression↗2011-10-19
▶
Ubuntu
Firefox vulnerabilities↗2011-08-17
▶
Ubuntu
Mozvoikko update↗2011-08-17
▶
CVE-2011-2985 — Out-of-bounds Write in Mozilla | cvebase