CVEvulnerability
CVE-2011-0056
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla seamonkey (<= 2.0.11)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla firefox (<= 3.5.16)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
… and 83 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://downloads.avaya.com/css/P8/documents/100133195 downloads.avaya.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-05.html Vendor Advisory
- http://www.securityfocus.com/bid/46650 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=622015 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14013 oval.cisecurity.org
- http://downloads.avaya.com/css/P8/documents/100133195 downloads.avaya.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-05.html Vendor Advisory
- http://www.securityfocus.com/bid/46650 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=622015 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14013 oval.cisecurity.org