Published: 30/09/2011 Updated: 19/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Integer underflow in Mozilla Firefox 3.6.x prior to 3.6.23 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 3.6
mozilla firefox 3.6.10
mozilla firefox 3.6.11
mozilla firefox 3.6.18
mozilla firefox 3.6.19
mozilla firefox 3.6.8
mozilla firefox 3.6.9
mozilla firefox 3.6.16
mozilla firefox 3.6.17
mozilla firefox 3.6.2
mozilla firefox 3.6.3
mozilla firefox 3.6.4
mozilla firefox 3.6.12
mozilla firefox 3.6.13
mozilla firefox 3.6.20
mozilla firefox 3.6.21
mozilla firefox 3.6.6
mozilla firefox 3.6.7
mozilla firefox 3.6.14
mozilla firefox 3.6.15
mozilla firefox 3.6.22

Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox: CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog — which has open as the default action —, while a user presses the ENTER key CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman discovered crashes ...

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey: CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog — which has open as the default action —, while a user presses the ENTER key CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman di ...

Mozilla Foundation Security Advisory 2011-37 Integer underflow when using JavaScript RegExp Announced September 27, 2011 Reporter Mark Kaplan Impact Critical Products Firefox Fixed in ...

CWE-189 http://www.mozilla.org/security/announce/2011/mfsa2011-37.html https://bugzilla.mozilla.org/show_bug.cgi?id=684815 http://www.debian.org/security/2011/dsa-2312 http://www.redhat.com/support/errata/RHSA-2011-1341.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 http://www.debian.org/security/2011/dsa-2313 http://www.debian.org/security/2011/dsa-2317 http://www.mandriva.com/security/advisories?name=MDVSA-2011:140 http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14012 https://nvd.nist.gov https://www.debian.org/security/./dsa-2313

CVE-2011-2998

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect