Published: 30/06/2011 Updated: 19/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x prior to 3.6.18 and Thunderbird prior to 3.1.11 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird 2.0.0.1
mozilla thunderbird 2.0.0.0
mozilla thunderbird 1.5.2
mozilla thunderbird 1.5.1
mozilla thunderbird 3.0.1
mozilla thunderbird 1.0.6
mozilla thunderbird 1.0.7
mozilla thunderbird 1.0.4
mozilla thunderbird 3.0.7
mozilla thunderbird 1.5.0.4
mozilla thunderbird 3.1.6
mozilla thunderbird 1.5.0.2
mozilla thunderbird 3.1.2
mozilla thunderbird 3.0.10
mozilla thunderbird 2.0.0.16
mozilla thunderbird 2.0.0.23
mozilla thunderbird 1.7.1
mozilla thunderbird 2.0.0.6
mozilla thunderbird 1.0
mozilla thunderbird 0.5
mozilla thunderbird 0.6
mozilla thunderbird
mozilla thunderbird 3.0
mozilla thunderbird 2.0.0.3
mozilla thunderbird 2.0.0.19
mozilla thunderbird 2.0.0.12
mozilla thunderbird 1.0.8
mozilla thunderbird 1.5
mozilla thunderbird 1.0.5
mozilla thunderbird 3.1.4
mozilla thunderbird 1.5.0.6
mozilla thunderbird 1.5.0.7
mozilla thunderbird 3.0.6
mozilla thunderbird 3.1.1
mozilla thunderbird 2.0.0.14
mozilla thunderbird 2.0.0.17
mozilla thunderbird 1.7.3
mozilla thunderbird 1.5.0.13
mozilla thunderbird 1.0.1
mozilla thunderbird 0.3
mozilla thunderbird 0.4
mozilla thunderbird 3.0.5
mozilla thunderbird 2.0.0.2
mozilla thunderbird 2.0.0.5
mozilla thunderbird 3.0.2
mozilla thunderbird 2.0.0.8
mozilla thunderbird 1.0.2
mozilla thunderbird 1.5.0.3
mozilla thunderbird 3.1.7
mozilla thunderbird 3.1.5
mozilla thunderbird 1.5.0.1
mozilla thunderbird 3.1
mozilla thunderbird 2.0.0.7
mozilla thunderbird 1.5.0.12
mozilla thunderbird 1.5.0.5
mozilla thunderbird 1.5.0.14
mozilla thunderbird 0.7.2
mozilla thunderbird 0.7.3
mozilla thunderbird 0.8
mozilla thunderbird 0.9
mozilla thunderbird 3.0.4
mozilla thunderbird 2.0.0.18
mozilla thunderbird 1.5.0.9
mozilla thunderbird 1.5.0.8
mozilla thunderbird 2.0.0.4
mozilla thunderbird 3.0.3
mozilla thunderbird 1.0.3
mozilla thunderbird 3.0.8
mozilla thunderbird 3.1.3
mozilla thunderbird 3.0.11
mozilla thunderbird 3.0.9
mozilla thunderbird 1.5.0.10
mozilla thunderbird 1.5.0.11
mozilla thunderbird 2.0
mozilla thunderbird 2.0.0.21
mozilla thunderbird 2.0.0.22
mozilla thunderbird 2.0.0.9
mozilla thunderbird 0.7
mozilla thunderbird 0.7.1
mozilla thunderbird 0.1
mozilla thunderbird 0.2
mozilla thunderbird 3.1.8
mozilla thunderbird 3.1.9
mozilla firefox 3.6.9
mozilla firefox 3.6.13
mozilla firefox 3.6.6
mozilla firefox 3.6.7
mozilla firefox 3.6.2
mozilla firefox 3.6.8
mozilla firefox 3.6.3
mozilla firefox 3.6.11
mozilla firefox 3.6.4
mozilla firefox 3.6.14
mozilla firefox 3.6.15
mozilla firefox 3.6.12
mozilla firefox 3.6.10
mozilla firefox 3.6.16
mozilla firefox 3.6.17

Multiple Vulnerabilities were fixed in Firefox and Xulrunner ...

In rare instances, Firefox could have trouble accessing some websites ...

Multiple vulnerabilities were fixed in Thunderbird ...

Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox: CVE-2011-0083 / CVE-2011-2363 regenrecht discovered two use-after-frees in SVG processing, which could lead to the execution of arbitrary code CVE-2011-0085 regenrecht discovered a use-after-free in XUL processing, which could lead to the execution o ...

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey: CVE-2011-0083 / CVE-2011-2363 regenrecht discovered two use-after-frees in SVG processing, which could lead to the execution of arbitrary code CVE-2011-0085 regenrecht discovered a use-after-free in XUL processing, which could lead ...

Mozilla Foundation Security Advisory 2011-19 Miscellaneous memory safety hazards (rv:30/19218) Announced June 21, 2011 Reporter Mozilla developers and community Impact Critical Products Firefox, SeaMonkey, Thunderbird ...

NVD-CWE-noinfo http://www.mozilla.org/security/announce/2011/mfsa2011-19.html https://bugzilla.mozilla.org/show_bug.cgi?id=655742 http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 http://www.redhat.com/support/errata/RHSA-2011-0885.html http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html http://www.redhat.com/support/errata/RHSA-2011-0888.html http://www.redhat.com/support/errata/RHSA-2011-0887.html http://www.redhat.com/support/errata/RHSA-2011-0886.html http://www.debian.org/security/2011/dsa-2268 http://www.debian.org/security/2011/dsa-2273 http://www.debian.org/security/2011/dsa-2269 http://www.ubuntu.com/usn/USN-1149-1 http://secunia.com/advisories/45002 http://www.securityfocus.com/bid/48368 http://support.avaya.com/css/P8/documents/100144854 http://support.avaya.com/css/P8/documents/100145333 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14184 https://nvd.nist.gov https://usn.ubuntu.com/1149-1/

Get Started

CVE-2011-2365

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect