CVE-2011-2371
NoneCVSS
—
EPSS
75.7%
Published
Jun 30, 2011
CISA due date
—
The record
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:5.0 | xulrunner | 0 | 1.9.0.19-12 |
| Debian:6.0 | iceape | 0 | 2.0.11-6 |
| Debian:6.0 | icedove | 0 | 3.0.11-1+squeeze3 |
| Debian:6.0 | iceweasel | 0 | 3.5.16-8 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:3.6.18-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.9-71.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.5.0.12-39.el4 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:2.0.0.24-18.el5_6 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:2.0.0.24-18.el5_6 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:3.6.18-1.el5_6 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:3.6.18-1.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:1.9.2.18-2.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:1.9.2.18-2.el5_6 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:1.9.2.18-2.el5_6 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:3.6.18-1.el6_1 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:3.6.18-1.el6_1 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:1.9.2.18-2.el6_1 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:1.9.2.18-2.el6_1 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:1.9.2.18-2.el6_1 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:2.0.0.24-18.el5_6 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:2.0.0.24-18.el5_6 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects xulrunner
- CVE-2010-3179 Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before… Also affects xulrunner
- CVE-2010-1205 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… Also affects xulrunner
- CVE-2010-1199 Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before… Also affects xulrunner
- CVE-2010-0167 The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x… Also affects xulrunner
- CVE-2009-3382 layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x… Also affects xulrunner
- CVE-2009-3373 Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and… Also affects xulrunner
- CVE-2009-2464 The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before… Also affects xulrunner