CVEvulnerability

CVE-2011-2998

10.0 HIGH Published 2011-09-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-09-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-189

Description

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Affected configurations

• mozilla firefox 3.6 • mozilla firefox 3.6.2 • mozilla firefox 3.6.3 • mozilla firefox 3.6.4 • mozilla firefox 3.6.6 • mozilla firefox 3.6.7 • mozilla firefox 3.6.8 • mozilla firefox 3.6.9 • mozilla firefox 3.6.10 • mozilla firefox 3.6.11 • mozilla firefox 3.6.12 • mozilla firefox 3.6.13 • mozilla firefox 3.6.14 • mozilla firefox 3.6.15 • mozilla firefox 3.6.16 • mozilla firefox 3.6.17 • mozilla firefox 3.6.18 • mozilla firefox 3.6.19 • mozilla firefox 3.6.20 • mozilla firefox 3.6.21 • mozilla firefox 3.6.22

Related

Weakness · not in database (1)

References