PT-2011-4241 · Mozilla · Firefox+1

Published 2011-09-27 · Updated 2024-06-15 · CVE-2011-3003

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 7.0 SeaMonkey versions prior to 2.4

Description The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, or possibly execute arbitrary code. This is achieved through an unspecified WebGL test case that triggers a memory-allocation error, resulting in an out-of-bounds write operation.

Recommendations For Mozilla Firefox versions prior to 7.0, update to version 7.0 or later to resolve the issue. For SeaMonkey versions prior to 2.4, update to version 2.4 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-3003

OPENSUSE-SU-2024:10071-1

Affected Products

Firefox

Seamonkey

References · 907

• https://nvd.nist.gov/vuln/detail/CVE-2011-3003 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2011-41 · Vendor Advisory
• http://mozilla.org/security/announce/2011/mfsa2011-41.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3003 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=682335 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:141 · Vendor Advisory
• https://suse.com/security/cve/CVE-2012-1938 · Note
• https://suse.com/security/cve/CVE-2012-1965 · Note
• https://suse.com/security/cve/CVE-2011-3003 · Note
• https://suse.com/security/cve/CVE-2012-1950 · Note
• https://suse.com/security/cve/CVE-2014-1587 · Note
• https://suse.com/security/cve/CVE-2015-4483 · Note
• https://suse.com/security/cve/CVE-2011-3648 · Note
• https://suse.com/security/cve/CVE-2009-3389 · Note