Lucene search
MitreCVE-2011-0080HistoryMay 07, 2011 - 6:55 p.m.
CVE-2011-0080
2011-05-0718:55:01
mitre
web.nvd.nist.gov
77
cve-2011-0080
mozilla firefox
thunderbird
seamonkey
browser engine
memory corruption
application crash
remote code execution
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
10
Confidence
High
EPSS
0.598
Percentile
97.8%
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected configurations
Node
mozillafirefoxMatch3.6
ORmozillafirefoxMatch3.6.2
ORmozillafirefoxMatch3.6.3
ORmozillafirefoxMatch3.6.4
ORmozillafirefoxMatch3.6.6
ORmozillafirefoxMatch3.6.7
ORmozillafirefoxMatch3.6.8
ORmozillafirefoxMatch3.6.9
ORmozillafirefoxMatch3.6.10
ORmozillafirefoxMatch3.6.11
ORmozillafirefoxMatch3.6.12
ORmozillafirefoxMatch3.6.13
ORmozillafirefoxMatch3.6.14
ORmozillafirefoxMatch3.6.15
ORmozillafirefoxMatch3.6.16
Node
mozillaseamonkeyRange≤2.0.13
ORmozillaseamonkeyMatch1.0
ORmozillaseamonkeyMatch1.0alpha
ORmozillaseamonkeyMatch1.0beta
ORmozillaseamonkeyMatch1.0.1
ORmozillaseamonkeyMatch1.0.2
ORmozillaseamonkeyMatch1.0.3
ORmozillaseamonkeyMatch1.0.4
ORmozillaseamonkeyMatch1.0.5
ORmozillaseamonkeyMatch1.0.6
ORmozillaseamonkeyMatch1.0.7
ORmozillaseamonkeyMatch1.0.8
ORmozillaseamonkeyMatch1.0.9
ORmozillaseamonkeyMatch1.1
ORmozillaseamonkeyMatch1.1alpha
ORmozillaseamonkeyMatch1.1beta
ORmozillaseamonkeyMatch1.1.1
ORmozillaseamonkeyMatch1.1.2
ORmozillaseamonkeyMatch1.1.3
ORmozillaseamonkeyMatch1.1.4
ORmozillaseamonkeyMatch1.1.5
ORmozillaseamonkeyMatch1.1.6
ORmozillaseamonkeyMatch1.1.7
ORmozillaseamonkeyMatch1.1.8
ORmozillaseamonkeyMatch1.1.9
ORmozillaseamonkeyMatch1.1.10
ORmozillaseamonkeyMatch1.1.11
ORmozillaseamonkeyMatch1.1.12
ORmozillaseamonkeyMatch1.1.13
ORmozillaseamonkeyMatch1.1.14
ORmozillaseamonkeyMatch1.1.15
ORmozillaseamonkeyMatch1.1.16
ORmozillaseamonkeyMatch1.1.17
ORmozillaseamonkeyMatch1.1.18
ORmozillaseamonkeyMatch1.1.19
ORmozillaseamonkeyMatch1.5.0.8
ORmozillaseamonkeyMatch1.5.0.9
ORmozillaseamonkeyMatch1.5.0.10
ORmozillaseamonkeyMatch2.0
ORmozillaseamonkeyMatch2.0alpha_1
ORmozillaseamonkeyMatch2.0alpha_2
ORmozillaseamonkeyMatch2.0alpha_3
ORmozillaseamonkeyMatch2.0beta_1
ORmozillaseamonkeyMatch2.0beta_2
ORmozillaseamonkeyMatch2.0rc1
ORmozillaseamonkeyMatch2.0rc2
ORmozillaseamonkeyMatch2.0.1
ORmozillaseamonkeyMatch2.0.2
ORmozillaseamonkeyMatch2.0.3
ORmozillaseamonkeyMatch2.0.4
ORmozillaseamonkeyMatch2.0.5
ORmozillaseamonkeyMatch2.0.6
ORmozillaseamonkeyMatch2.0.7
ORmozillaseamonkeyMatch2.0.8
ORmozillaseamonkeyMatch2.0.9
ORmozillaseamonkeyMatch2.0.10
ORmozillaseamonkeyMatch2.0.11
ORmozillaseamonkeyMatch2.0.12
Node
mozillafirefoxMatch3.5
ORmozillafirefoxMatch3.5.1
ORmozillafirefoxMatch3.5.2
ORmozillafirefoxMatch3.5.3
ORmozillafirefoxMatch3.5.4
ORmozillafirefoxMatch3.5.5
ORmozillafirefoxMatch3.5.6
ORmozillafirefoxMatch3.5.7
ORmozillafirefoxMatch3.5.8
ORmozillafirefoxMatch3.5.9
ORmozillafirefoxMatch3.5.10
ORmozillafirefoxMatch3.5.11
ORmozillafirefoxMatch3.5.12
ORmozillafirefoxMatch3.5.13
ORmozillafirefoxMatch3.5.14
ORmozillafirefoxMatch3.5.15
ORmozillafirefoxMatch3.5.16
ORmozillafirefoxMatch3.5.17
ORmozillafirefoxMatch3.5.18
Node
mozillathunderbirdRange≤3.1.9
ORmozillathunderbirdMatch0.1
ORmozillathunderbirdMatch0.2
ORmozillathunderbirdMatch0.3
ORmozillathunderbirdMatch0.4
ORmozillathunderbirdMatch0.5
ORmozillathunderbirdMatch0.6
ORmozillathunderbirdMatch0.7
ORmozillathunderbirdMatch0.7.1
ORmozillathunderbirdMatch0.7.2
ORmozillathunderbirdMatch0.7.3
ORmozillathunderbirdMatch0.8
ORmozillathunderbirdMatch0.9
ORmozillathunderbirdMatch1.0
ORmozillathunderbirdMatch1.0.1
ORmozillathunderbirdMatch1.0.2
ORmozillathunderbirdMatch1.0.3
ORmozillathunderbirdMatch1.0.4
ORmozillathunderbirdMatch1.0.5
ORmozillathunderbirdMatch1.0.6
ORmozillathunderbirdMatch1.0.7
ORmozillathunderbirdMatch1.0.8
ORmozillathunderbirdMatch1.5
ORmozillathunderbirdMatch1.5beta2
ORmozillathunderbirdMatch1.5.0.1
ORmozillathunderbirdMatch1.5.0.2
ORmozillathunderbirdMatch1.5.0.3
ORmozillathunderbirdMatch1.5.0.4
ORmozillathunderbirdMatch1.5.0.5
ORmozillathunderbirdMatch1.5.0.6
ORmozillathunderbirdMatch1.5.0.7
ORmozillathunderbirdMatch1.5.0.8
ORmozillathunderbirdMatch1.5.0.9
ORmozillathunderbirdMatch1.5.0.10
ORmozillathunderbirdMatch1.5.0.11
ORmozillathunderbirdMatch1.5.0.12
ORmozillathunderbirdMatch1.5.0.13
ORmozillathunderbirdMatch1.5.0.14
ORmozillathunderbirdMatch1.5.1
ORmozillathunderbirdMatch1.5.2
ORmozillathunderbirdMatch1.7.1
ORmozillathunderbirdMatch1.7.3
ORmozillathunderbirdMatch2.0
ORmozillathunderbirdMatch2.0.0.0
ORmozillathunderbirdMatch2.0.0.1
ORmozillathunderbirdMatch2.0.0.2
ORmozillathunderbirdMatch2.0.0.3
ORmozillathunderbirdMatch2.0.0.4
ORmozillathunderbirdMatch2.0.0.5
ORmozillathunderbirdMatch2.0.0.6
ORmozillathunderbirdMatch2.0.0.7
ORmozillathunderbirdMatch2.0.0.8
ORmozillathunderbirdMatch2.0.0.9
ORmozillathunderbirdMatch2.0.0.12
ORmozillathunderbirdMatch2.0.0.14
ORmozillathunderbirdMatch2.0.0.16
ORmozillathunderbirdMatch2.0.0.17
ORmozillathunderbirdMatch2.0.0.18
ORmozillathunderbirdMatch2.0.0.19
ORmozillathunderbirdMatch2.0.0.21
ORmozillathunderbirdMatch2.0.0.22
ORmozillathunderbirdMatch2.0.0.23
ORmozillathunderbirdMatch3.1
ORmozillathunderbirdMatch3.1.1
ORmozillathunderbirdMatch3.1.2
ORmozillathunderbirdMatch3.1.3
ORmozillathunderbirdMatch3.1.4
ORmozillathunderbirdMatch3.1.5
ORmozillathunderbirdMatch3.1.6
ORmozillathunderbirdMatch3.1.7
ORmozillathunderbirdMatch3.1.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | 3.6 | cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.2 | cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.3 | cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.4 | cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.6 | cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.7 | cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.8 | cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.9 | cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.10 | cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.11 | cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:* |
References
blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird
downloads.avaya.com/css/P8/documents/100134543
downloads.avaya.com/css/P8/documents/100144158
www.debian.org/security/2011/dsa-2227
www.debian.org/security/2011/dsa-2228
www.debian.org/security/2011/dsa-2235
www.mandriva.com/security/advisories?name=MDVSA-2011:079
www.mandriva.com/security/advisories?name=MDVSA-2011:080
www.mozilla.org/security/announce/2011/mfsa2011-12.html
www.securityfocus.com/bid/47641
bugzilla.mozilla.org/show_bug.cgi?id=615147
bugzilla.mozilla.org/show_bug.cgi?id=634257
bugzilla.mozilla.org/show_bug.cgi?id=637621
bugzilla.mozilla.org/show_bug.cgi?id=637957
bugzilla.mozilla.org/show_bug.cgi?id=638236
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13866
Related
nvd
nvd
CVE-2011-0080
2011-05-07 18:55:01
prion
prion
Memory corruption
2011-05-07 18:55:00
cvelist
cvelist
CVE-2011-0080
2011-05-07 18:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:56:34
ubuntucve
ubuntucve
CVE-2011-0080
2011-05-04 00:00:00
nessus
nessus
RHEL 4 / 5 : thunderbird (RHSA-2011:0474)
2011-04-29 00:00:00
Oracle Linux 4 : thunderbird (ELSA-2011-0474)
2013-07-12 00:00:00
CentOS 4 / 5 : thunderbird (CESA-2011:0474)
2011-05-02 00:00:00
redhat
redhat
(RHSA-2011:0474) Critical: thunderbird security update
2011-04-28 00:00:00
(RHSA-2011:0473) Critical: seamonkey security update
2011-04-28 00:00:00
(RHSA-2011:0475) Critical: thunderbird security update
2011-04-28 00:00:00
openvas
openvas
CentOS Update for thunderbird CESA-2011:0474 centos4 x86_64
2012-07-30 00:00:00
CentOS Update for thunderbird CESA-2011:0474 centos5 i386
2011-08-09 00:00:00
CentOS Update for thunderbird CESA-2011:0474 centos4 x86_64
2012-07-30 00:00:00
centos
centos
thunderbird security update
2011-04-29 15:49:06
seamonkey security update
2011-04-29 20:53:41
firefox, xulrunner security update
2011-04-29 15:48:25
oraclelinux
oraclelinux
thunderbird security update
2011-04-29 00:00:00
seamonkey security update
2011-04-29 00:00:00
thunderbird security update
2011-04-29 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-12
2011-05-01 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-05-11 00:00:00
mozilla
mozilla
Miscellaneous memory safety hazards (rv:2.0.1/ 1.9.2.17/ 1.9.1.19) — Mozilla
2011-04-28 00:00:00
debian
debian
[SECURITY] [DSA 2235-1] icedove security update
2011-05-10 19:59:51
[SECURITY] [DSA 2228-1] iceweasel security update
2011-05-01 16:34:39
[SECURITY] [DSA 2227-1] iceape security update
2011-04-30 14:52:24
ubuntu
ubuntu
Thunderbird regression
2011-06-06 00:00:00
Firefox and Xulrunner vulnerabilities
2011-04-29 00:00:00
Thunderbird vulnerabilities
2011-05-05 00:00:00
osv
osv
iceape - several
2011-04-30 00:00:00
iceweasel - several
2011-05-01 00:00:00
icedove - several
2011-05-10 00:00:00
suse
suse
remote code execution, remote denial of service in MozillaFirefox,seamonkey,MozillaThunderbird
2011-05-05 17:46:39
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
10
Confidence
High
EPSS
0.598
Percentile
97.8%
Related for CVE-2011-0080