9.3
CVSSv2

CVE-2011-3002

Published: 29/09/2011 Updated: 29/11/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox prior to 7.0 and SeaMonkey prior to 2.4, does not validate the return value of a GrowAtomTable function call, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a memory-allocation error and a resulting buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox

mozilla seamonkey

Vendor Advisories

This update provides packages compatible with Firefox 7 ...
Firefox could be made to crash or possibly run programs as your login if it opened a malicious website ...
Mozilla Foundation Security Advisory 2011-41 Potentially exploitable WebGL crashes Announced September 27, 2011 Reporter Michael Jordan, Ben Hawkes Impact Critical Products Firefox, SeaMonkey Fixed in ...