CVE-2011-2991 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Thunderbird

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents4 sources
Severity
10.0CRITICALNVD
EPSS
7.0%
top 8.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla ThunderbirdMozilla FirefoxMozilla Seamonkey
Timeline
PublishedAug 18
Latest updateMay 17

Description

The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement JavaScript, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox4.0, 4.0.1, 5.0+2
▶NVDmozilla/seamonkey17 versions+16

🔴Vulnerability Details

2
GHSA
GHSA-whh5-4g3c-r37h: The browser engine in Mozilla Firefox 4↗2022-05-17
▶
CVEList
CVE-2011-2991: The browser engine in Mozilla Firefox 4↗2011-08-18
▶

📋Vendor Advisories

3
Ubuntu
Libvoikko regression↗2011-10-19
▶
Ubuntu
Firefox vulnerabilities↗2011-08-17
▶
Ubuntu
Mozvoikko update↗2011-08-17
▶
CVE-2011-2991 — Mozilla Thunderbird vulnerability | cvebase