CVE-2011-0065
NoneCVSS
—
EPSS
73.8%
Published
May 7, 2011
CISA due date
—
The record
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | iceape | 0 | 2.0.11-5 |
| Debian:6.0 | icedove | 0 | 3.0.11-1+squeeze2 |
| Debian:6.0 | iceweasel | 0 | 3.5.16-7 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:3.6.17-1.el5_6 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:3.6.17-1.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:1.9.2.17-3.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:1.9.2.17-3.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:1.9.2.17-3.el5_6 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
Related vulnerabilities
- CVE-2012-4186 Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla… Also affects iceape
- CVE-2012-4188 Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0… Also affects iceape
- CVE-2012-0470 Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in… Also affects iceape
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects iceape
- CVE-2011-0073 Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does… Also affects iceape
- CVE-2011-3026 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote… Also affects firefox
- CVE-2011-3659 Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0… Also affects firefox
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects firefox