CVEvulnerability
CVE-2011-0073
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla firefox 3.6.14
• mozilla firefox 3.6.15
• mozilla firefox 3.6.16
• mozilla seamonkey (<= 2.0.13)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
… and 90 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://downloads.avaya.com/css/P8/documents/100134543 downloads.avaya.com
- http://downloads.avaya.com/css/P8/documents/100144158 downloads.avaya.com
- http://securityreason.com/securityalert/8310 securityreason.com
- http://www.debian.org/security/2011/dsa-2227 www.debian.org
- http://www.debian.org/security/2011/dsa-2228 www.debian.org
- http://www.debian.org/security/2011/dsa-2235 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-13.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=630919 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020 oval.cisecurity.org
- http://downloads.avaya.com/css/P8/documents/100134543 downloads.avaya.com
- http://downloads.avaya.com/css/P8/documents/100144158 downloads.avaya.com
- http://securityreason.com/securityalert/8310 securityreason.com
- http://www.debian.org/security/2011/dsa-2227 www.debian.org
- http://www.debian.org/security/2011/dsa-2228 www.debian.org
- http://www.debian.org/security/2011/dsa-2235 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-13.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=630919 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020 oval.cisecurity.org