CVE-2011-2992
published 2011-08-18CVE-2011-2992: The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows…
PriorityP334critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
3.59%
88.1th percentile
The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Affected
97 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | thunderbird | <= 5.0 | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_ubuntu10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2011-08-17·CVSS 10.0
CVE-2011-0084 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Multiple Firefox vulnerabilities have been fixed
Aral Yaman discovered a vulnerability in the WebGL engine. An attacker
could potentially use this to crash Firefox or execute arbitrary code with
the privileges of the user invoking Firefox. (CVE-2011-2989)
Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An
attacker could potentially use this to crash Firefox or execute arbitrary
code with the privileges of the user invoking Firefox. (CVE-2011-2991)
Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg
reader. An attacker could potentially use this to crash Firefox or execute
arbitrary code with the privileges of the user invoking Firefox.
(CVE-2011-2991)
Robert Kaiser, Jesse Ruderman, Gary Kwong, Christoph
GHSA
GHSA-cfj8-jvr5-7v74: The Ogg reader in the browser engine in Mozilla Firefox 4
ghsa_unreviewed·2022-05-17
CVE-2011-2992 [HIGH] CWE-119 GHSA-cfj8-jvr5-7v74: The Ogg reader in the browser engine in Mozilla Firefox 4
The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Suricata
ET WEB_CLIENT Adobe Acrobat Util.printf Buffer Overflow Attempt
suricata·2011-07-01
CVE-2008-2992 ET WEB_CLIENT Adobe Acrobat Util.printf Buffer Overflow Attempt
ET WEB_CLIENT Adobe Acrobat Util.printf Buffer Overflow Attempt
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Adobe Acrobat Util.printf Buffer Overflow Attempt"; flow:established,to_client; file.data; content:"util.printf|28 22 25|"; nocase; fast_pattern; pcre:"/util.printf\x28\x22\x25[^\x2C\x29]*f\x22\x2C/i"; reference:url,www.coresecurity.com/content/adobe-reader-buffer-overflow; reference:bid,30035; reference:cve,2008-2992; classtype:attempted-user; sid:2013152; rev:4; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, created_at 2011_07_01, cve CVE_2008_2992, deployment Perimeter, confidence High, signature_severity Major, tag Web_Client_Attacks, updated_at 2024_04_09;)
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.htmlhttp://secunia.com/advisories/49055http://www.mozilla.org/security/announce/2011/mfsa2011-29.htmlhttp://www.mozilla.org/security/announce/2011/mfsa2011-31.htmlhttp://www.mozilla.org/security/announce/2011/mfsa2011-33.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=672789https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14209http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.htmlhttp://secunia.com/advisories/49055http://www.mozilla.org/security/announce/2011/mfsa2011-29.htmlhttp://www.mozilla.org/security/announce/2011/mfsa2011-31.htmlhttp://www.mozilla.org/security/announce/2011/mfsa2011-33.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=672789https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14209
2011-08-18
Published