CVEvulnerability
CVE-2011-0055
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the js_HasOwnProperty function and garbage collection.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla seamonkey (<= 2.0.11)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla firefox (<= 3.5.16)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
… and 83 more
Related
Weakness · not in database (1)
References
- http://downloads.avaya.com/css/P8/documents/100133195 downloads.avaya.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-03.html Vendor Advisory
- http://www.securityfocus.com/archive/1/516802 www.securityfocus.com
- http://www.securityfocus.com/bid/46661 www.securityfocus.com
- http://www.zerodayinitiative.com/advisories/ZDI-11-103/ www.zerodayinitiative.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=616009 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=619255 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14476 oval.cisecurity.org
- http://downloads.avaya.com/css/P8/documents/100133195 downloads.avaya.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-03.html Vendor Advisory
- http://www.securityfocus.com/archive/1/516802 www.securityfocus.com
- http://www.securityfocus.com/bid/46661 www.securityfocus.com
- http://www.zerodayinitiative.com/advisories/ZDI-11-103/ www.zerodayinitiative.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=616009 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=619255 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14476 oval.cisecurity.org