Lucene search
Ubuntu.comUB:CVE-2011-0084HistoryAug 17, 2011 - 12:00 a.m.
CVE-2011-0084
2011-08-1700:00:00
ubuntu.com
ubuntu.com
16
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.802
Percentile
98.4%
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before
3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions
before 6; SeaMonkey 2.x before 2.3; and possibly other products does not
properly handle SVG text, which allows remote attackers to execute
arbitrary code via unspecified vectors that lead to a โdangling pointer.โ
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | <ย 3.6.20+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | firefox | <ย 3.6.20+build1+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | firefox | <ย 6.0+build1+nobinonly-0ubuntu0.11.04.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | <ย 3.1.12+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | thunderbird | <ย 3.1.12+build1+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | thunderbird | <ย 3.1.12+build1+nobinonly-0ubuntu0.11.04.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | xulrunner-1.9.2 | <ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | xulrunner-1.9.2 | <ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | xulrunner-1.9.2 | <ย 1.9.2.27+build1+nobinonly-0ubuntu0.11.04.1 | UNKNOWN |
Related
openvas
openvas
Mozilla Products 'SVG' Code Execution Vulnerability (Windows)
2011-09-09 00:00:00
Mozilla Products 'SVG' Code Execution Vulnerability - Windows
2011-09-09 00:00:00
RedHat Update for thunderbird RHSA-2011:1166-01
2012-07-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084)
2012-01-03 00:00:00
Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084)
2012-01-03 00:00:00
prion
prion
Session fixation
2011-08-18 18:55:00
cve
cve
CVE-2011-0084
2011-08-18 18:55:01
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:01:37
nvd
nvd
CVE-2011-0084
2011-08-18 18:55:01
cvelist
cvelist
CVE-2011-0084
2011-08-18 18:00:00
securityvulns
securityvulns
zdi
zdi
oraclelinux
oraclelinux
thunderbird security update
2011-08-16 00:00:00
firefox security update
2011-08-16 00:00:00
redhat
redhat
(RHSA-2011:1166) Critical: thunderbird security update
2011-08-16 00:00:00
(RHSA-2011:1164) Critical: firefox security update
2011-08-16 00:00:00
nessus
nessus
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64
2012-08-01 00:00:00
Oracle Linux 6 : thunderbird (ELSA-2011-1166)
2013-07-12 00:00:00
RHEL 6 : thunderbird (RHSA-2011:1166)
2011-08-17 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2011-08-26 00:00:00
Firefox and Xulrunner vulnerabilities
2011-08-19 00:00:00
Libvoikko regression
2011-10-19 00:00:00
debian
debian
[SECURITY] [DSA 2295-1] iceape security update
2011-08-17 17:37:19
[SECURITY] [DSA 2297-1] icedove security update
2011-08-21 18:57:44
[SECURITY] [DSA 2296-1] iceweasel security update
2011-08-17 19:13:01
osv
osv
icedove - several
2011-08-21 00:00:00
iceape - several
2011-08-17 00:00:00
iceweasel - several
2011-08-17 00:00:00
centos
centos
firefox, xulrunner security update
2011-08-16 23:27:06
mozilla
mozilla
Security issues addressed in Thunderbird 3.1.12 โ Mozilla
2011-08-16 00:00:00
Security issues addressed in Firefox 3.6.20 โ Mozilla
2011-08-16 00:00:00
Security issues addressed in Thunderbird 6 โ Mozilla
2011-08-16 00:00:00
suse
suse
MozillaThunderbird: Update to 3.1.12 (important)
2011-08-29 20:08:38
Security update for Mozilla Firefox (important)
2011-08-29 21:08:22
MozillaFirefox: Update to Firefox 3.6.20 (important)
2011-08-26 20:08:19
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyๅคไธชๅฎๅ
จๆผๆด
2011-08-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.802
Percentile
98.4%
Related for UB:CVE-2011-0084