Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2011-0065
HistoryMay 07, 2011 - 6:55 p.m.

CVE-2011-0065

2011-05-0718:55:00
CWE-399
mitre
web.nvd.nist.gov
61
cve
mozilla firefox
vulnerability
remote execution
arbitrary code
seamonkey

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.5

Confidence

High

EPSS

0.969

Percentile

99.7%

JSON

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT’s mChannel.

Affected configurations

Nvd
Node
mozillafirefoxMatch3.6
OR
mozillafirefoxMatch3.6.2
OR
mozillafirefoxMatch3.6.3
OR
mozillafirefoxMatch3.6.4
OR
mozillafirefoxMatch3.6.6
OR
mozillafirefoxMatch3.6.7
OR
mozillafirefoxMatch3.6.8
OR
mozillafirefoxMatch3.6.9
OR
mozillafirefoxMatch3.6.10
OR
mozillafirefoxMatch3.6.11
OR
mozillafirefoxMatch3.6.12
OR
mozillafirefoxMatch3.6.13
OR
mozillafirefoxMatch3.6.14
OR
mozillafirefoxMatch3.6.15
OR
mozillafirefoxMatch3.6.16
Node
mozillaseamonkeyRange≤2.0.13
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1alpha
OR
mozillaseamonkeyMatch1.1beta
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillaseamonkeyMatch1.1.13
OR
mozillaseamonkeyMatch1.1.14
OR
mozillaseamonkeyMatch1.1.15
OR
mozillaseamonkeyMatch1.1.16
OR
mozillaseamonkeyMatch1.1.17
OR
mozillaseamonkeyMatch1.1.18
OR
mozillaseamonkeyMatch1.1.19
OR
mozillaseamonkeyMatch1.5.0.8
OR
mozillaseamonkeyMatch1.5.0.9
OR
mozillaseamonkeyMatch1.5.0.10
OR
mozillaseamonkeyMatch2.0
OR
mozillaseamonkeyMatch2.0alpha_1
OR
mozillaseamonkeyMatch2.0alpha_2
OR
mozillaseamonkeyMatch2.0alpha_3
OR
mozillaseamonkeyMatch2.0beta_1
OR
mozillaseamonkeyMatch2.0beta_2
OR
mozillaseamonkeyMatch2.0rc1
OR
mozillaseamonkeyMatch2.0rc2
OR
mozillaseamonkeyMatch2.0.1
OR
mozillaseamonkeyMatch2.0.2
OR
mozillaseamonkeyMatch2.0.3
OR
mozillaseamonkeyMatch2.0.4
OR
mozillaseamonkeyMatch2.0.5
OR
mozillaseamonkeyMatch2.0.6
OR
mozillaseamonkeyMatch2.0.7
OR
mozillaseamonkeyMatch2.0.8
OR
mozillaseamonkeyMatch2.0.9
OR
mozillaseamonkeyMatch2.0.10
OR
mozillaseamonkeyMatch2.0.11
OR
mozillaseamonkeyMatch2.0.12
Node
mozillafirefoxRange≤3.5.18
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0preview_release
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.0.8
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatch1.5.0.4
OR
mozillafirefoxMatch1.5.0.5
OR
mozillafirefoxMatch1.5.0.6
OR
mozillafirefoxMatch1.5.0.7
OR
mozillafirefoxMatch1.5.0.8
OR
mozillafirefoxMatch1.5.0.9
OR
mozillafirefoxMatch1.5.0.10
OR
mozillafirefoxMatch1.5.0.11
OR
mozillafirefoxMatch1.5.0.12
OR
mozillafirefoxMatch1.5.1
OR
mozillafirefoxMatch1.5.2
OR
mozillafirefoxMatch1.5.3
OR
mozillafirefoxMatch1.5.4
OR
mozillafirefoxMatch1.5.5
OR
mozillafirefoxMatch1.5.6
OR
mozillafirefoxMatch1.5.7
OR
mozillafirefoxMatch1.5.8
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.2
OR
mozillafirefoxMatch2.0.0.3
OR
mozillafirefoxMatch2.0.0.4
OR
mozillafirefoxMatch2.0.0.5
OR
mozillafirefoxMatch2.0.0.6
OR
mozillafirefoxMatch2.0.0.7
OR
mozillafirefoxMatch2.0.0.8
OR
mozillafirefoxMatch2.0.0.9
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillafirefoxMatch2.0.0.14
OR
mozillafirefoxMatch2.0.0.15
OR
mozillafirefoxMatch2.0.0.16
OR
mozillafirefoxMatch2.0.0.17
OR
mozillafirefoxMatch2.0.0.18
OR
mozillafirefoxMatch2.0.0.19
OR
mozillafirefoxMatch2.0.0.20
OR
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.0.14
OR
mozillafirefoxMatch3.0.15
OR
mozillafirefoxMatch3.0.16
OR
mozillafirefoxMatch3.0.17
OR
mozillafirefoxMatch3.5
OR
mozillafirefoxMatch3.5.1
OR
mozillafirefoxMatch3.5.2
OR
mozillafirefoxMatch3.5.3
OR
mozillafirefoxMatch3.5.4
OR
mozillafirefoxMatch3.5.5
OR
mozillafirefoxMatch3.5.6
OR
mozillafirefoxMatch3.5.7
OR
mozillafirefoxMatch3.5.8
OR
mozillafirefoxMatch3.5.9
OR
mozillafirefoxMatch3.5.10
OR
mozillafirefoxMatch3.5.11
OR
mozillafirefoxMatch3.5.12
OR
mozillafirefoxMatch3.5.13
OR
mozillafirefoxMatch3.5.14
OR
mozillafirefoxMatch3.5.15
OR
mozillafirefoxMatch3.5.16
OR
mozillafirefoxMatch3.5.17
VendorProductVersionCPE
mozillafirefox3.6cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*
mozillafirefox3.6.2cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*
mozillafirefox3.6.3cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*
mozillafirefox3.6.4cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*
mozillafirefox3.6.6cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*
mozillafirefox3.6.7cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*
mozillafirefox3.6.8cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*
mozillafirefox3.6.9cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*
mozillafirefox3.6.10cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*
mozillafirefox3.6.11cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*
Rows per page:
1-10 of 1641

Related

saint 4
securityvulns 3
ubuntucve 1
veracode 1
packetstorm 3
cvelist 1
exploitdb 4
zdt 1
checkpoint_advisories 1
canvas 1
nvd 1
zdi 1
prion 1
mozilla 1
openvas 38
nessus 31
debian 4
osv 3
ubuntu 5
centos 1
redhat 1
oraclelinux 1
suse 1
gentoo 1
saint
saint
Mozilla Firefox OBJECT mChannel Use-After-Free
2011-08-22 00:00:00
Mozilla Firefox OBJECT mChannel Use-After-Free
2011-08-22 00:00:00
Mozilla Firefox OBJECT mChannel Use-After-Free
2011-08-22 00:00:00
securityvulns
securityvulns
ZDI-11-158: Mozilla Firefox OBJECT mChannel Remote Code Execution Vulnerability
2011-05-11 00:00:00
Mozilla Foundation Security Advisory 2011-13
2011-05-01 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-05-11 00:00:00
ubuntucve
ubuntucve
CVE-2011-0065
2011-05-04 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:57:31
packetstorm
packetstorm
Mozilla Firefox 3.6.16 mChannel Use After Free
2011-08-10 00:00:00
Mozilla Firefox 3.6 mChannel Use-After-Free
2014-11-25 00:00:00
Mozilla Firefox 3.6.16 mChannel Use After Free Exploit
2011-08-05 00:00:00
cvelist
cvelist
CVE-2011-0065
2011-05-07 18:00:00
exploitdb
exploitdb
Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)
2011-08-05 00:00:00
Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free
2011-08-16 00:00:00
Mozilla Firefox 3.6.16 (OSX) - mChannel Use-After-Free (Metasploit) (2)
2012-01-17 00:00:00
zdt
zdt
Mozilla Firefox 3.6 mChannel Use-After-Free Vulnerability
2014-11-26 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox OBJECT mChannel Use After Free (CVE-2011-0065)
2011-11-01 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_CHANNELREDIRECT
2011-05-07 18:55:00
nvd
nvd
CVE-2011-0065
2011-05-07 18:55:00
zdi
zdi
Mozilla Firefox OBJECT mChannel Remote Code Execution Vulnerability
2011-05-10 00:00:00
prion
prion
Design/Logic Flaw
2011-05-07 18:55:00
mozilla
mozilla
Multiple dangling pointer vulnerabilities — Mozilla
2011-04-28 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (May 2011) - Windows
2011-05-18 00:00:00
Mozilla Products Multiple Vulnerabilities May-11 (Windows)
2011-05-18 00:00:00
Debian: Security Advisory (DSA-2235-1)
2011-08-03 00:00:00
nessus
nessus
openSUSE Security Update : seamonkey (seamonkey-4462)
2014-06-13 00:00:00
openSUSE Security Update : seamonkey (seamonkey-4462)
2014-06-13 00:00:00
openSUSE Security Update : seamonkey (seamonkey-4462)
2011-05-05 00:00:00
debian
debian
[SECURITY] [DSA 2227-1] iceape security update
2011-04-30 14:52:24
[SECURITY] [DSA 2235-1] icedove security update
2011-05-10 19:59:51
[SECURITY] [DSA 2228-1] iceweasel security update
2011-05-01 16:34:39
osv
osv
iceape - several
2011-04-30 00:00:00
iceweasel - several
2011-05-01 00:00:00
icedove - several
2011-05-10 00:00:00
ubuntu
ubuntu
Thunderbird regression
2011-06-06 00:00:00
Firefox and Xulrunner vulnerabilities
2011-04-29 00:00:00
Thunderbird vulnerabilities
2011-05-05 00:00:00
centos
centos
firefox, xulrunner security update
2011-04-29 15:48:25
redhat
redhat
(RHSA-2011:0471) Critical: firefox security update
2011-04-28 00:00:00
oraclelinux
oraclelinux
firefox security update
2011-04-29 00:00:00
suse
suse
remote code execution, remote denial of service in MozillaFirefox,seamonkey,MozillaThunderbird
2011-05-05 17:46:39
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.5

Confidence

High

EPSS

0.969

Percentile

99.7%

JSON
Related for CVE-2011-0065
saint4securityvulns3ubuntucve1veracode1packetstorm3cvelist1exploitdb4zdt1checkpoint_advisories1canvas1nvd1zdi1prion1mozilla1openvas38nessus31debian4osv3ubuntu5centos1redhat1oraclelinux1suse1gentoo1