PT-2010-1163 · Mozilla+2 · Seamonkey+4

Publicado 2010-06-21 · Atualizado 2024-12-12 · CVE-2011-2371

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.18 and 4.x through 4.0.1 Thunderbird versions prior to 3.1.11 SeaMonkey versions prior to 2.0.14

Description The issue is caused by an integer overflow in the Array.reduceRight method, which allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object. This can also lead to a denial of service. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Mozilla Firefox versions prior to 3.6.18, update to version 3.6.18 or later. For Mozilla Firefox versions 4.x through 4.0.1, update to version 4.0.2 or later. For Thunderbird versions prior to 3.1.11, update to version 3.1.11 or later. For SeaMonkey versions prior to 2.0.14, update to version 2.0.14 or later.

Exploit

Correção

RCE

Integer Overflow

Enumeração de Fraquezas

CWE-189

CWE-190

Identificadores relacionados

BDU:2020-04519

CVE-2011-2371

DSA-2268-1

DSA-2269-1

DSA-2273-3

OPENSUSE-SU-2014_1100-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:10230-1

OPENSUSE-SU-2024:14572-1

RHSA-2011:0885

RHSA-2011:0887

RHSA-2011:0888

RHSA-2011_0885

RHSA-2011_0887

RHSA-2011_0888

Produtos afetados

Firefox

Red Hat

Seamonkey

Suse

Thunderbird

Referências · 2123

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_attribchildremoved.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nssvgvalue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_tostring_console_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proto_crmfrequest.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_reduceright.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_interleaved_write.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb · Exploit
• 🔥 https://github.com/vlad902/annotated-fbi-tbb-exploit · Exploit
• 🔥 https://github.com/argp/cve-2011-3026-firefox · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• 🔥 https://github.com/mk219533/CVE-2010-1205 · Exploit
• 🔥 https://exploit-db.com/exploits/17976 · Exploit