CVEvulnerability
CVE-2011-2378
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-08-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer."
Affected configurations
• mozilla firefox (<= 3.6.19)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 2.0.0.10
• mozilla firefox 2.0.0.11
• mozilla firefox 2.0.0.12
• mozilla firefox 2.0.0.13
• mozilla firefox 2.0.0.14
• mozilla firefox 2.0.0.15
• mozilla firefox 2.0.0.16
• mozilla firefox 2.0.0.17
• mozilla firefox 2.0.0.18
• mozilla firefox 2.0.0.19
• mozilla firefox 2.0.0.20
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
• mozilla firefox 3.0.6
• mozilla firefox 3.0.7
… and 85 more
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html lists.opensuse.org
- http://www.debian.org/security/2011/dsa-2295 www.debian.org
- http://www.debian.org/security/2011/dsa-2296 www.debian.org
- http://www.debian.org/security/2011/dsa-2297 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-30.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1164.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1166.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=648065 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14163 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html lists.opensuse.org
- http://www.debian.org/security/2011/dsa-2295 www.debian.org
- http://www.debian.org/security/2011/dsa-2296 www.debian.org
- http://www.debian.org/security/2011/dsa-2297 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-30.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1164.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1166.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=648065 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14163 oval.cisecurity.org