Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2011-0073

Published: 07/05/2011 Updated: 19/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Firefox

Vulnerability Summary

Mozilla Firefox prior to 3.5.19 and 3.6.x prior to 3.6.17, and SeaMonkey prior to 2.0.14, does not properly use nsTreeRange data structures, which allows remote malicious users to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 3.6.2

mozilla firefox 3.6.10

mozilla firefox 3.6.9

mozilla firefox 3.6

mozilla firefox 3.6.8

mozilla firefox 3.6.15

mozilla firefox 3.6.16

mozilla firefox 3.6.3

mozilla firefox 3.6.4

mozilla firefox 3.6.11

mozilla firefox 3.6.12

mozilla firefox 3.6.6

mozilla firefox 3.6.7

mozilla firefox 3.6.13

mozilla firefox 3.6.14

mozilla seamonkey 1.0

mozilla seamonkey 1.0.1

mozilla seamonkey 1.0.8

mozilla seamonkey 1.0.9

mozilla seamonkey 1.1.12

mozilla seamonkey 1.1.13

mozilla seamonkey 1.1.2

mozilla seamonkey 1.1.3

mozilla seamonkey 1.1.4

mozilla seamonkey 1.1

mozilla seamonkey 1.5.0.10

mozilla seamonkey 2.0.4

mozilla seamonkey 2.0

mozilla seamonkey 2.0.6

mozilla seamonkey 2.0.7

mozilla seamonkey 1.0.6

mozilla seamonkey 1.0.7

mozilla seamonkey 1.1.11

mozilla seamonkey 1.1.18

mozilla seamonkey 1.1.19

mozilla seamonkey 1.1.9

mozilla seamonkey 2.0.2

mozilla seamonkey 2.0.3

mozilla seamonkey 2.0.5

mozilla seamonkey 2.0.12

mozilla seamonkey

mozilla seamonkey 1.0.2

mozilla seamonkey 1.0.3

mozilla seamonkey 1.1.1

mozilla seamonkey 1.1.14

mozilla seamonkey 1.1.15

mozilla seamonkey 1.1.5

mozilla seamonkey 1.1.6

mozilla seamonkey 1.5.0.8

mozilla seamonkey 1.5.0.9

mozilla seamonkey 2.0.8

mozilla seamonkey 2.0.9

mozilla seamonkey 1.0.4

mozilla seamonkey 1.0.5

mozilla seamonkey 1.1.10

mozilla seamonkey 1.1.16

mozilla seamonkey 1.1.17

mozilla seamonkey 1.1.7

mozilla seamonkey 1.1.8

mozilla seamonkey 2.0.1

mozilla seamonkey 2.0.10

mozilla seamonkey 2.0.11

mozilla firefox 3.5.1

mozilla firefox 3.5.10

mozilla firefox 3.5.9

mozilla firefox 3.0.12

mozilla firefox 3.0.11

mozilla firefox 3.0.4

mozilla firefox 3.0.3

mozilla firefox 2.0.0.20

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.7

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 1.5

mozilla firefox 1.5.0.1

mozilla firefox 1.5.0.6

mozilla firefox 1.5.0.7

mozilla firefox 1.0

mozilla firefox 1.0.3

mozilla firefox 3.5.11

mozilla firefox 3.5.12

mozilla firefox 3.5.6

mozilla firefox 3.5.7

mozilla firefox 3.0.14

mozilla firefox 3.0.13

mozilla firefox 3.0.6

mozilla firefox 3.0.5

mozilla firefox 2.0.0.12

mozilla firefox 2.0.0.19

mozilla firefox 2.0.0.15

mozilla firefox 2.0.0.13

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.2

mozilla firefox 1.5.0.11

mozilla firefox 1.5.0.12

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.9

mozilla firefox 1.5.5

mozilla firefox 1.0.1

mozilla firefox 1.0.6

mozilla firefox 1.0.8

mozilla firefox 3.5.17

mozilla firefox

mozilla firefox 3.5.2

mozilla firefox 3.5.3

mozilla firefox 3.5.8

mozilla firefox 3.5

mozilla firefox 3.0.10

mozilla firefox 3.0.9

mozilla firefox 3.0.2

mozilla firefox 3.0.1

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.17

mozilla firefox 2.0.0.10

mozilla firefox 2.0.0.18

mozilla firefox 2.0.0.6

mozilla firefox 1.5.0.4

mozilla firefox 1.5.0.5

mozilla firefox 1.5.0.10

mozilla firefox 1.5.3

mozilla firefox 1.5.4

mozilla firefox 1.5.8

mozilla firefox 1.0.2

mozilla firefox 1.0.5

mozilla firefox 3.5.13

mozilla firefox 3.5.14

mozilla firefox 3.5.4

mozilla firefox 3.5.5

mozilla firefox 3.0.17

mozilla firefox 3.0.16

mozilla firefox 3.0.15

mozilla firefox 3.0.8

mozilla firefox 3.0.7

mozilla firefox 3.0

mozilla firefox 2.0.0.14

mozilla firefox 2.0.0.16

mozilla firefox 2.0.0.11

mozilla firefox 2.0.0.5

mozilla firefox 2.0.0.4

mozilla firefox 1.5.0.2

mozilla firefox 1.5.0.3

mozilla firefox 1.5.1

mozilla firefox 1.5.2

mozilla firefox 1.5.7

mozilla firefox 1.5.6

mozilla firefox 1.0.4

mozilla firefox 1.0.7

mozilla firefox 3.5.15

mozilla firefox 3.5.16

Vendor Advisories

Debian Security Advisories: DSA-2228-1 iceweasel -- several vulnerabilities
Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox: CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 Scoobidiver, Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo, Mats Palmgren, Jesse Ruderman, Aki Kelin and Martin Barbella disc ...
Debian Security Advisories: DSA-2235-1 icedove -- several vulnerabilities
Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 Scoobidiver, Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo, Ma ...
Ubuntu Security Notice: firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.2 vulnerabilities
Multiple vulnerabilities in Firefox and Xulrunner ...
Ubuntu Security Notice: Multiple Xulrunner 1.9.1 vulnerabilities
Multiple xulrunner-191 vulnerabilities ...
Ubuntu Security Notice: thunderbird regression
An empty menu bar sometimes appeared after upgrade in USN-1122-2 ...
Ubuntu Security Notice: thunderbird vulnerabilities
Thunderbird could be made to run programs as your login if it opened specially crafted mail ...
Ubuntu Security Notice: thunderbird vulnerabilities
Thunderbird could be made to run programs as your login if it opened specially crafted mail ...
Mozilla: Multiple dangling pointer vulnerabilities
Mozilla Foundation Security Advisory 2011-13 Multiple dangling pointer vulnerabilities Announced April 28, 2011 Reporter regenrecht Impact Critical Products Firefox, SeaMonkey Fixed in ...

Exploits

Exploit DB: Mozilla Firefox - 'nsTreeRange' Dangling Pointer (2)
Advisory : Abysssec Public Exploit : This module exploits a code execution vulnerability in Mozilla Firefox <= 3616 caused by nsTreeSelection element The specific flaw exists within the way Firefox handles user defined functions of a nsTreeSelection element When executing the function invalidateSelection it is possible to free the nsTreeS ...
Exploit DB: Mozilla Firefox - 'nsTreeRange' Dangling Pointer (Metasploit) (1)
## # $Id: mozilla_nstreerangerb 13148 2011-07-10 21:10:45Z sinn3r $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

References

CWE-20https://bugzilla.mozilla.org/show_bug.cgi?id=630919http://www.mozilla.org/security/announce/2011/mfsa2011-13.htmlhttp://www.debian.org/security/2011/dsa-2235http://www.debian.org/security/2011/dsa-2227http://www.debian.org/security/2011/dsa-2228http://www.mandriva.com/security/advisories?name=MDVSA-2011:079http://securityreason.com/securityalert/8310http://downloads.avaya.com/css/P8/documents/100144158http://downloads.avaya.com/css/P8/documents/100134543https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020https://nvd.nist.govhttps://www.debian.org/security/./dsa-2228https://usn.ubuntu.com/1112-1/https://www.exploit-db.com/exploits/17419/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook