CVE-2011-0073
NoneCVSS
—
EPSS
70.2%
Published
May 7, 2011
CISA due date
—
The record
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | iceape | 0 | 2.0.11-5 |
| Debian:6.0 | icedove | 0 | 3.0.11-1+squeeze2 |
| Debian:6.0 | iceweasel | 0 | 3.5.16-7 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:3.6.17-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.9-70.el4_8 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.12-38.el4 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:2.0.0.24-17.el5_6 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:2.0.0.24-17.el5_6 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:3.6.17-1.el5_6 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:3.6.17-1.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:1.9.2.17-3.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:1.9.2.17-3.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:1.9.2.17-3.el5_6 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:3.1.10-1.el6_0 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:3.1.10-1.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:3.1.10-1.el6_0 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:3.1.10-1.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:3.6.17-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:3.1.10-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:3.1.10-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:1.9.2.17-4.el6_0 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:2.0.0.24-17.el5_6 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:2.0.0.24-17.el5_6 |
Related vulnerabilities
- CVE-2012-4186 Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla… Also affects iceape
- CVE-2012-4188 Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0… Also affects iceape
- CVE-2012-0470 Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in… Also affects iceape
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects iceape
- CVE-2011-0065 Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17… Also affects iceape
- CVE-2011-3026 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote… Also affects firefox
- CVE-2011-3659 Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0… Also affects firefox
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects firefox