CVE-2011-0065
high · 10Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
10
CVSS
73.8%
EPSS (exploit prob.)
99th
EPSS percentile
2011-05-07
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| mozilla | firefox | 3.6 |
| mozilla | firefox | 3.6.2 |
| mozilla | firefox | 3.6.3 |
| mozilla | firefox | 3.6.4 |
| mozilla | firefox | 3.6.6 |
| mozilla | firefox | 3.6.7 |
| mozilla | firefox | 3.6.8 |
| mozilla | firefox | 3.6.9 |
| mozilla | firefox | 3.6.10 |
| mozilla | firefox | 3.6.11 |
| mozilla | firefox | 3.6.12 |
| mozilla | firefox | 3.6.13 |
| mozilla | firefox | 3.6.14 |
| mozilla | firefox | 3.6.15 |
| mozilla | firefox | 3.6.16 |
| mozilla | seamonkey | <= 2.0.13 |
| mozilla | seamonkey | 1.0 |
| mozilla | seamonkey | 1.0 |
| mozilla | seamonkey | 1.0 |
| mozilla | seamonkey | 1.0.1 |
| mozilla | seamonkey | 1.0.2 |
| mozilla | seamonkey | 1.0.3 |
| mozilla | seamonkey | 1.0.4 |
| mozilla | seamonkey | 1.0.5 |
| mozilla | seamonkey | 1.0.6 |
| mozilla | seamonkey | 1.0.7 |
| mozilla | seamonkey | 1.0.8 |
| mozilla | seamonkey | 1.0.9 |
| mozilla | seamonkey | 1.1 |
| mozilla | seamonkey | 1.1 |
| mozilla | seamonkey | 1.1 |
| mozilla | seamonkey | 1.1.1 |
| mozilla | seamonkey | 1.1.2 |
| mozilla | seamonkey | 1.1.3 |
| mozilla | seamonkey | 1.1.4 |
| mozilla | seamonkey | 1.1.5 |
| mozilla | seamonkey | 1.1.6 |
| mozilla | seamonkey | 1.1.7 |
| mozilla | seamonkey | 1.1.8 |
| mozilla | seamonkey | 1.1.9 |
Check a specific version with /api/v1/cve/match.
References
- http://downloads.avaya.com/css/P8/documents/100144158
- http://securityreason.com/securityalert/8326
- http://securityreason.com/securityalert/8331
- http://securityreason.com/securityalert/8340
- http://www.debian.org/security/2011/dsa-2227
- http://www.debian.org/security/2011/dsa-2228
- http://www.debian.org/security/2011/dsa-2235
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079
- http://www.mozilla.org/security/announce/2011/mfsa2011-13.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=634986
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14142
- http://downloads.avaya.com/css/P8/documents/100144158
- http://securityreason.com/securityalert/8326
- http://securityreason.com/securityalert/8331
- http://securityreason.com/securityalert/8340
- http://www.debian.org/security/2011/dsa-2227
- http://www.debian.org/security/2011/dsa-2228
- http://www.debian.org/security/2011/dsa-2235
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079
- http://www.mozilla.org/security/announce/2011/mfsa2011-13.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=634986
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14142
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-0065