CVEvulnerability
CVE-2011-2371
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
Affected configurations
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla firefox (<= 3.6.17)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
… and 178 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/45002 secunia.com
- http://securityreason.com/securityalert/8472 securityreason.com
- http://support.avaya.com/css/P8/documents/100144854 support.avaya.com
- http://support.avaya.com/css/P8/documents/100145333 support.avaya.com
- http://www.debian.org/security/2011/dsa-2268 www.debian.org
- http://www.debian.org/security/2011/dsa-2269 www.debian.org
- http://www.debian.org/security/2011/dsa-2273 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-22.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0885.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0887.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0888.html www.redhat.com
- http://www.ubuntu.com/usn/USN-1149-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=664009 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13987 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/45002 secunia.com
- http://securityreason.com/securityalert/8472 securityreason.com
- http://support.avaya.com/css/P8/documents/100144854 support.avaya.com
- http://support.avaya.com/css/P8/documents/100145333 support.avaya.com
- http://www.debian.org/security/2011/dsa-2268 www.debian.org
- http://www.debian.org/security/2011/dsa-2269 www.debian.org
- http://www.debian.org/security/2011/dsa-2273 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-22.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0885.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0887.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0888.html www.redhat.com
- http://www.ubuntu.com/usn/USN-1149-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=664009 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13987 oval.cisecurity.org