Lucene search
Mozilla FoundationMFSA2011-37HistorySep 27, 2011 - 12:00 a.m.
Integer underflow when using JavaScript RegExp — Mozilla
2011-09-2700:00:00
Mozilla Foundation
www.mozilla.org
17
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.106 Low
EPSS
Percentile
95.1%
Mark Kaplan reported a potentially exploitable crash due to integer underflow when using a large JavaScript RegExp expression. We would also like to thank Mark for contributing the fix for this problem.
Affected configurations
Node
mozillafirefoxRange<3.6.23
Related
nvd
nvd
CVE-2011-2998
2011-09-30 10:55:03
CVE-2011-3867
2011-09-29 00:55:03
cve
cve
CVE-2011-2998
2011-09-30 10:55:03
CVE-2011-3867
2011-09-29 00:55:03
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:02:42
prion
prion
Integer overflow
2011-09-30 10:55:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-37
2011-10-01 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-10-01 00:00:00
ubuntucve
ubuntucve
CVE-2011-2998
2011-09-30 00:00:00
cvelist
cvelist
CVE-2011-2998
2011-09-30 10:00:00
centos
centos
seamonkey security update
2011-09-29 18:51:19
thunderbird security update
2011-09-29 04:34:00
firefox, xulrunner security update
2011-09-29 03:54:30
openvas
openvas
CentOS Update for thunderbird CESA-2011:1343 centos5 x86_64
2012-07-30 00:00:00
CentOS Update for thunderbird CESA-2011:1343 centos4 i386
2011-09-30 00:00:00
redhat
redhat
(RHSA-2011:1344) Critical: seamonkey security update
2011-09-28 00:00:00
(RHSA-2011:1343) Critical: thunderbird security update
2011-09-28 00:00:00
(RHSA-2011:1342) Critical: thunderbird security update
2011-09-28 00:00:00
nessus
nessus
RHEL 4 / 5 : thunderbird (RHSA-2011:1343)
2011-09-29 00:00:00
Oracle Linux 4 : thunderbird (ELSA-2011-1343)
2013-07-12 00:00:00
CentOS 4 / 5 : thunderbird (CESA-2011:1343)
2011-09-29 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2011-09-29 00:00:00
thunderbird security update
2011-09-28 00:00:00
thunderbird security update
2011-09-28 00:00:00
osv
osv
icedove - several
2011-10-05 00:00:00
iceape - several
2011-09-29 00:00:00
iceweasel - several
2011-09-29 00:00:00
debian
debian
[SECURITY] [DSA 2313-1] iceweasel security update
2011-09-29 20:30:47
[BSA-048] Security Update for Iceweasel
2011-10-03 09:41:06
[SECURITY] [DSA 2317-1] icedove security update
2011-10-05 20:19:05
ibm
ibm
suse
suse
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
Security update for mozilla-nss (critical)
2011-11-18 22:08:26
Seamonkey update (critical)
2011-12-01 15:08:20
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.106 Low
EPSS
Percentile
95.1%
Related for MFSA2011-37