Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-3658
HistoryDec 20, 2011 - 12:00 a.m.

CVE-2011-3658

2011-12-2000:00:00
ubuntu.com
ubuntu.com
12

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.954

Percentile

99.4%

JSON

The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and
SeaMonkey 2.5 does not properly interact with DOMAttrModified event
handlers, which allows remote attackers to cause a denial of service
(out-of-bounds memory access) or possibly have unspecified other impact via
vectors involving removal of SVG elements.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox<Β 9.0.1+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox<Β 9.0.1+build1-0ubuntu0.11.10.2UNKNOWN
ubuntu10.04noarchthunderbird<Β 3.1.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird<Β 3.1.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird<Β 3.1.20+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird<Β 9.0+build2-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2<Β 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2<Β 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchxulrunner-1.9.2<Β 1.9.2.28+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN

Related

cvelist 1
prion 1
metasploit 1
openvas 25
mozilla 1
zdi 1
saint 4
seebug 1
packetstorm 1
nvd 1
cve 1
checkpoint_advisories 1
canvas 1
exploitdb 1
nessus 23
ubuntu 5
suse 4
freebsd 1
securityvulns 1
gentoo 1
cvelist
cvelist
CVE-2011-3658
2011-12-21 02:00:00
prion
prion
Out-of-bounds
2011-12-21 04:02:00
metasploit
metasploit
Firefox nsSVGValue Out-of-Bounds Access Vulnerability
2012-05-08 02:41:03
openvas
openvas
Mozilla Products DOMAttrModified Memory Corruption Vulnerability (MAC OS X)
2011-12-22 00:00:00
Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Mac OS X
2011-12-22 00:00:00
Mozilla Firefox Security Advisory (MFSA2011-55) - Linux
2021-11-16 00:00:00
mozilla
mozilla
nsSVGValue out-of-bounds access β€” Mozilla
2011-12-20 00:00:00
zdi
zdi
Mozilla Firefox nsSVGValue Out-of-Bounds Access Remote Code Execution Vulnerability
2012-04-09 00:00:00
saint
saint
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
Firefox DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access
2012-05-21 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyθΆŠη•Œε†…ε­˜η ΄εζΌζ΄ž
2011-12-21 00:00:00
packetstorm
packetstorm
Mozilla Firefox 7 / 8 Out-Of-Bounds Access
2012-05-08 00:00:00
nvd
nvd
CVE-2011-3658
2011-12-21 04:02:00
cve
cve
CVE-2011-3658
2011-12-21 04:02:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Thunderbird SeaMonkey nsSVGValue Memory Corruption (CVE-2011-3658)
2013-03-20 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_NSSVGVALUE
2011-12-21 04:02:00
exploitdb
exploitdb
Mozilla Firefox 7 / 8 &lt; 8.0.1 - nsSVGValue Out-of-Bounds Access (Metasploit)
2012-05-09 00:00:00
nessus
nessus
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:0039-2)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : mozilla (MDVSA-2011:192)
2012-09-06 00:00:00
Ubuntu 11.04 / 11.10 : firefox vulnerabilities (USN-1306-1)
2012-01-09 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-01-24 00:00:00
Firefox vulnerabilities
2012-01-06 00:00:00
Mozvoikko and ubufox update
2012-01-06 00:00:00
suse
suse
MozillaFirefox (important)
2012-02-09 19:09:53
seamonkey (important)
2012-01-05 12:35:43
seamonkey (important)
2012-01-05 12:08:18
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-12-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-01-02 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.954

Percentile

99.4%

JSON
Related for UB:CVE-2011-3658
cvelist1prion1metasploit1openvas25mozilla1zdi1saint4seebug1packetstorm1nvd1cve1checkpoint_advisories1canvas1exploitdb1nessus23ubuntu5suse4freebsd1securityvulns1gentoo1