CVEvulnerability
CVE-2011-0054
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving non-local JavaScript variables, aka an "upvarMap" issue.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla seamonkey (<= 2.0.11)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla firefox (<= 3.5.16)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
… and 83 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://downloads.avaya.com/css/P8/documents/100133195 downloads.avaya.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-04.html Vendor Advisory
- http://www.securityfocus.com/bid/46648 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=615657 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14018 oval.cisecurity.org
- http://downloads.avaya.com/css/P8/documents/100133195 downloads.avaya.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-04.html Vendor Advisory
- http://www.securityfocus.com/bid/46648 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=615657 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14018 oval.cisecurity.org