PT-2011-4567 · Mozilla+1 · Seamonkey+3

Published 2011-12-20 · Updated 2024-12-12 · CVE-2011-3658

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 8.0 Thunderbird version 8.0 SeaMonkey version 2.5

Description The issue is related to the SVG implementation, which does not properly interact with DOMAttrModified event handlers. This can allow remote attackers to cause a denial of service, specifically an out-of-bounds memory access, or possibly have other unspecified impacts. The attack vectors involve the removal of SVG elements.

Recommendations For Mozilla Firefox version 8.0, update to a version that fixes the SVG implementation issue. For Thunderbird version 8.0, update to a version that fixes the SVG implementation issue. For SeaMonkey version 2.5, update to a version that fixes the SVG implementation issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-3658

OPENSUSE-SU-2012_0007-1

OPENSUSE-SU-2012_0039-1

OPENSUSE-SU-2012_0039-2

OPENSUSE-SU-2014_1100-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:10230-1

OPENSUSE-SU-2024:14572-1

ZDI-12-056

Affected Products

Firefox

Seamonkey

Suse

Thunderbird

References · 2122

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_attribchildremoved.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nssvgvalue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_tostring_console_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proto_crmfrequest.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_reduceright.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_interleaved_write.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb · Exploit
• 🔥 https://github.com/vlad902/annotated-fbi-tbb-exploit · Exploit
• 🔥 https://github.com/argp/cve-2011-3026-firefox · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• 🔥 https://github.com/mk219533/CVE-2010-1205 · Exploit
• 🔥 https://exploit-db.com/exploits/18847 · Exploit