CVE-2011-2992 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Thunderbird

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
6.7%
top 8.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla ThunderbirdMozilla FirefoxMozilla Seamonkey
Timeline
PublishedAug 18
Latest updateMay 17

Description

The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox4.0, 4.0.1, 5.0+2
▶NVDmozilla/seamonkey13 versions+12

🔴Vulnerability Details

2
GHSA
GHSA-cfj8-jvr5-7v74: The Ogg reader in the browser engine in Mozilla Firefox 4↗2022-05-17
▶
CVEList
CVE-2011-2992: The Ogg reader in the browser engine in Mozilla Firefox 4↗2011-08-18
▶

📋Vendor Advisories

1
Ubuntu
Firefox vulnerabilities↗2011-08-17
▶
CVE-2011-2992 — Mozilla Thunderbird vulnerability | cvebase