10

CVE-2011-0073

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 3.6
Mozilla ≫ Firefox Version 3.6.2
Mozilla ≫ Firefox Version 3.6.3
Mozilla ≫ Firefox Version 3.6.4
Mozilla ≫ Firefox Version 3.6.6
Mozilla ≫ Firefox Version 3.6.7
Mozilla ≫ Firefox Version 3.6.8
Mozilla ≫ Firefox Version 3.6.9
Mozilla ≫ Firefox Version 3.6.10
Mozilla ≫ Firefox Version 3.6.11
Mozilla ≫ Firefox Version 3.6.12
Mozilla ≫ Firefox Version 3.6.13
Mozilla ≫ Firefox Version 3.6.14
Mozilla ≫ Firefox Version 3.6.15
Mozilla ≫ Firefox Version 3.6.16
Mozilla ≫ Seamonkey Version <= 2.0.13
Mozilla ≫ Seamonkey Version 1.0
Mozilla ≫ Seamonkey Version 1.0 Update alpha
Mozilla ≫ Seamonkey Version 1.0 Update beta
Mozilla ≫ Seamonkey Version 1.0.1
Mozilla ≫ Seamonkey Version 1.0.2
Mozilla ≫ Seamonkey Version 1.0.3
Mozilla ≫ Seamonkey Version 1.0.4
Mozilla ≫ Seamonkey Version 1.0.5
Mozilla ≫ Seamonkey Version 1.0.6
Mozilla ≫ Seamonkey Version 1.0.7
Mozilla ≫ Seamonkey Version 1.0.8
Mozilla ≫ Seamonkey Version 1.0.9
Mozilla ≫ Seamonkey Version 1.1
Mozilla ≫ Seamonkey Version 1.1 Update alpha
Mozilla ≫ Seamonkey Version 1.1 Update beta
Mozilla ≫ Seamonkey Version 1.1.1
Mozilla ≫ Seamonkey Version 1.1.2
Mozilla ≫ Seamonkey Version 1.1.3
Mozilla ≫ Seamonkey Version 1.1.4
Mozilla ≫ Seamonkey Version 1.1.5
Mozilla ≫ Seamonkey Version 1.1.6
Mozilla ≫ Seamonkey Version 1.1.7
Mozilla ≫ Seamonkey Version 1.1.8
Mozilla ≫ Seamonkey Version 1.1.9
Mozilla ≫ Seamonkey Version 1.1.10
Mozilla ≫ Seamonkey Version 1.1.11
Mozilla ≫ Seamonkey Version 1.1.12
Mozilla ≫ Seamonkey Version 1.1.13
Mozilla ≫ Seamonkey Version 1.1.14
Mozilla ≫ Seamonkey Version 1.1.15
Mozilla ≫ Seamonkey Version 1.1.16
Mozilla ≫ Seamonkey Version 1.1.17
Mozilla ≫ Seamonkey Version 1.1.18
Mozilla ≫ Seamonkey Version 1.1.19
Mozilla ≫ Seamonkey Version 1.5.0.8
Mozilla ≫ Seamonkey Version 1.5.0.9
Mozilla ≫ Seamonkey Version 1.5.0.10
Mozilla ≫ Seamonkey Version 2.0
Mozilla ≫ Seamonkey Version 2.0 Update alpha_1
Mozilla ≫ Seamonkey Version 2.0 Update alpha_2
Mozilla ≫ Seamonkey Version 2.0 Update alpha_3
Mozilla ≫ Seamonkey Version 2.0 Update beta_1
Mozilla ≫ Seamonkey Version 2.0 Update beta_2
Mozilla ≫ Seamonkey Version 2.0 Update rc1
Mozilla ≫ Seamonkey Version 2.0 Update rc2
Mozilla ≫ Seamonkey Version 2.0.1
Mozilla ≫ Seamonkey Version 2.0.2
Mozilla ≫ Seamonkey Version 2.0.3
Mozilla ≫ Seamonkey Version 2.0.4
Mozilla ≫ Seamonkey Version 2.0.5
Mozilla ≫ Seamonkey Version 2.0.6
Mozilla ≫ Seamonkey Version 2.0.7
Mozilla ≫ Seamonkey Version 2.0.8
Mozilla ≫ Seamonkey Version 2.0.9
Mozilla ≫ Seamonkey Version 2.0.10
Mozilla ≫ Seamonkey Version 2.0.11
Mozilla ≫ Seamonkey Version 2.0.12
Mozilla ≫ Firefox Version <= 3.5.18
Mozilla ≫ Firefox Version 1.0
Mozilla ≫ Firefox Version 1.0 Update preview_release
Mozilla ≫ Firefox Version 1.0.1
Mozilla ≫ Firefox Version 1.0.2
Mozilla ≫ Firefox Version 1.0.3
Mozilla ≫ Firefox Version 1.0.4
Mozilla ≫ Firefox Version 1.0.5
Mozilla ≫ Firefox Version 1.0.6
Mozilla ≫ Firefox Version 1.0.7
Mozilla ≫ Firefox Version 1.0.8
Mozilla ≫ Firefox Version 1.5
Mozilla ≫ Firefox Version 1.5 Update beta1
Mozilla ≫ Firefox Version 1.5 Update beta2
Mozilla ≫ Firefox Version 1.5.0.1
Mozilla ≫ Firefox Version 1.5.0.2
Mozilla ≫ Firefox Version 1.5.0.3
Mozilla ≫ Firefox Version 1.5.0.4
Mozilla ≫ Firefox Version 1.5.0.5
Mozilla ≫ Firefox Version 1.5.0.6
Mozilla ≫ Firefox Version 1.5.0.7
Mozilla ≫ Firefox Version 1.5.0.8
Mozilla ≫ Firefox Version 1.5.0.9
Mozilla ≫ Firefox Version 1.5.0.10
Mozilla ≫ Firefox Version 1.5.0.11
Mozilla ≫ Firefox Version 1.5.0.12
Mozilla ≫ Firefox Version 1.5.1
Mozilla ≫ Firefox Version 1.5.2
Mozilla ≫ Firefox Version 1.5.3
Mozilla ≫ Firefox Version 1.5.4
Mozilla ≫ Firefox Version 1.5.5
Mozilla ≫ Firefox Version 1.5.6
Mozilla ≫ Firefox Version 1.5.7
Mozilla ≫ Firefox Version 1.5.8
Mozilla ≫ Firefox Version 2.0
Mozilla ≫ Firefox Version 2.0.0.1
Mozilla ≫ Firefox Version 2.0.0.2
Mozilla ≫ Firefox Version 2.0.0.3
Mozilla ≫ Firefox Version 2.0.0.4
Mozilla ≫ Firefox Version 2.0.0.5
Mozilla ≫ Firefox Version 2.0.0.6
Mozilla ≫ Firefox Version 2.0.0.7
Mozilla ≫ Firefox Version 2.0.0.8
Mozilla ≫ Firefox Version 2.0.0.9
Mozilla ≫ Firefox Version 2.0.0.10
Mozilla ≫ Firefox Version 2.0.0.11
Mozilla ≫ Firefox Version 2.0.0.12
Mozilla ≫ Firefox Version 2.0.0.13
Mozilla ≫ Firefox Version 2.0.0.14
Mozilla ≫ Firefox Version 2.0.0.15
Mozilla ≫ Firefox Version 2.0.0.16
Mozilla ≫ Firefox Version 2.0.0.17
Mozilla ≫ Firefox Version 2.0.0.18
Mozilla ≫ Firefox Version 2.0.0.19
Mozilla ≫ Firefox Version 2.0.0.20
Mozilla ≫ Firefox Version 3.0
Mozilla ≫ Firefox Version 3.0.1
Mozilla ≫ Firefox Version 3.0.2
Mozilla ≫ Firefox Version 3.0.3
Mozilla ≫ Firefox Version 3.0.4
Mozilla ≫ Firefox Version 3.0.5
Mozilla ≫ Firefox Version 3.0.6
Mozilla ≫ Firefox Version 3.0.7
Mozilla ≫ Firefox Version 3.0.8
Mozilla ≫ Firefox Version 3.0.9
Mozilla ≫ Firefox Version 3.0.10
Mozilla ≫ Firefox Version 3.0.11
Mozilla ≫ Firefox Version 3.0.12
Mozilla ≫ Firefox Version 3.0.13
Mozilla ≫ Firefox Version 3.0.14
Mozilla ≫ Firefox Version 3.0.15
Mozilla ≫ Firefox Version 3.0.16
Mozilla ≫ Firefox Version 3.0.17
Mozilla ≫ Firefox Version 3.5
Mozilla ≫ Firefox Version 3.5.1
Mozilla ≫ Firefox Version 3.5.2
Mozilla ≫ Firefox Version 3.5.3
Mozilla ≫ Firefox Version 3.5.4
Mozilla ≫ Firefox Version 3.5.5
Mozilla ≫ Firefox Version 3.5.6
Mozilla ≫ Firefox Version 3.5.7
Mozilla ≫ Firefox Version 3.5.8
Mozilla ≫ Firefox Version 3.5.9
Mozilla ≫ Firefox Version 3.5.10
Mozilla ≫ Firefox Version 3.5.11
Mozilla ≫ Firefox Version 3.5.12
Mozilla ≫ Firefox Version 3.5.13
Mozilla ≫ Firefox Version 3.5.14
Mozilla ≫ Firefox Version 3.5.15
Mozilla ≫ Firefox Version 3.5.16
Mozilla ≫ Firefox Version 3.5.17
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 70.21% 0.993
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://downloads.avaya.com/css/P8/documents/100144158
http://www.mandriva.com/security/advisories?name=MDVSA-2011:079
http://www.debian.org/security/2011/dsa-2227
http://www.debian.org/security/2011/dsa-2228
http://www.debian.org/security/2011/dsa-2235
http://www.mozilla.org/security/announce/2011/mfsa2011-13.html
Vendor Advisory
http://downloads.avaya.com/css/P8/documents/100134543
http://securityreason.com/securityalert/8310
https://bugzilla.mozilla.org/show_bug.cgi?id=630919
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020