CVEvulnerability

CVE-2011-2996

10.0 HIGH Published 2011-09-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-09-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected configurations

• mozilla firefox 3.6 • mozilla firefox 3.6.2 • mozilla firefox 3.6.3 • mozilla firefox 3.6.4 • mozilla firefox 3.6.6 • mozilla firefox 3.6.7 • mozilla firefox 3.6.8 • mozilla firefox 3.6.9 • mozilla firefox 3.6.10 • mozilla firefox 3.6.11 • mozilla firefox 3.6.12 • mozilla firefox 3.6.13 • mozilla firefox 3.6.14 • mozilla firefox 3.6.15 • mozilla firefox 3.6.16 • mozilla firefox 3.6.17 • mozilla firefox 3.6.18 • mozilla firefox 3.6.19 • mozilla firefox 3.6.20 • mozilla firefox 3.6.21 • mozilla firefox 3.6.22

References