PT-2011-4236 · Mozilla+1 · Firefox+1

Mark Kaplan · Publicado 2011-09-28 · Atualizado 2017-09-19 · CVE-2011-2998

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.6.x through 3.6.22

Description The issue is caused by an integer underflow in JavaScript code containing a large RegExp expression, which allows remote attackers to cause a denial of service or possibly execute arbitrary code.

Recommendations For Mozilla Firefox versions 3.6.x through 3.6.22, update to version 3.6.23 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-2998

DSA-2312-1

DSA-2313-1

DSA-2317-1

RHSA-2011:1341

RHSA-2011:1342

RHSA-2011:1343

RHSA-2011:1344

RHSA-2011_1341

RHSA-2011_1342

RHSA-2011_1343

RHSA-2011_1344

Produtos afetados

Firefox

Red Hat

Referências · 23

• https://access.redhat.com/security/cve/CVE-2011-3000 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14012 · Nota
• http://redhat.com/support/errata/RHSA-2011-1341.html · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2011:141 · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2312 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-2995 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=684815 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-2999 · Nota
• http://debian.org/security/2011/dsa-2317 · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2313 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2011:1341 · Nota
• https://linux.oracle.com/errata/ELSA-2011-1341.html · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2011:140 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-2998 · Nota