CVEvulnerability
CVE-2011-3650
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.
Affected configurations
• mozilla firefox (<= 3.6.23)
• mozilla firefox 0.1
• mozilla firefox 0.2
• mozilla firefox 0.3
• mozilla firefox 0.4
• mozilla firefox 0.5
• mozilla firefox 0.6
• mozilla firefox 0.6.1
• mozilla firefox 0.7
• mozilla firefox 0.7.1
• mozilla firefox 0.8
• mozilla firefox 0.9
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.10
• mozilla firefox 0.10.1
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.4.1
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 1.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 2.0.0.10
… and 162 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2011/mfsa2011-49.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1439.html www.redhat.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=674776 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13870 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2011/mfsa2011-49.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1439.html www.redhat.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=674776 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13870 oval.cisecurity.org