PT-2011-4240 · Mozilla · Firefox+2

Michael Jordan · Published 2011-09-27 · Updated 2024-12-12 · CVE-2011-3002

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ANGLE versions prior to the version used in Mozilla Firefox 7.0 Mozilla Firefox versions prior to 7.0 SeaMonkey versions prior to 2.4

Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code. This is achieved through vectors that trigger a memory-allocation error, resulting in a buffer overflow, due to the failure to validate the return value of a function call.

Recommendations For ANGLE, update to a version used in or after Mozilla Firefox 7.0 to resolve the issue. For Mozilla Firefox, update to version 7.0 or later. For SeaMonkey, update to version 2.4 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-3002

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Affected Products

Angle

Firefox

Seamonkey

References · 2065

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3002 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3002 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=680840 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2011-41 · Vendor Advisory
• http://mozilla.org/security/announce/2011/mfsa2011-41.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:141 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-6856 · Note
• https://suse.com/security/cve/CVE-2024-4778 · Note
• https://suse.com/security/cve/CVE-2019-11751 · Note
• https://suse.com/security/cve/CVE-2017-5441 · Note
• https://suse.com/security/cve/CVE-2023-6861 · Note
• https://suse.com/security/cve/CVE-2015-0817 · Note
• https://suse.com/security/cve/CVE-2021-23965 · Note