10

CVE-2011-0073

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version3.6
Mozilla ≫ Firefox Version3.6.2
Mozilla ≫ Firefox Version3.6.3
Mozilla ≫ Firefox Version3.6.4
Mozilla ≫ Firefox Version3.6.6
Mozilla ≫ Firefox Version3.6.7
Mozilla ≫ Firefox Version3.6.8
Mozilla ≫ Firefox Version3.6.9
Mozilla ≫ Firefox Version3.6.10
Mozilla ≫ Firefox Version3.6.11
Mozilla ≫ Firefox Version3.6.12
Mozilla ≫ Firefox Version3.6.13
Mozilla ≫ Firefox Version3.6.14
Mozilla ≫ Firefox Version3.6.15
Mozilla ≫ Firefox Version3.6.16
Mozilla ≫ Seamonkey Version <= 2.0.13
Mozilla ≫ Seamonkey Version1.0
Mozilla ≫ Seamonkey Version1.0 Updatealpha
Mozilla ≫ Seamonkey Version1.0 Updatebeta
Mozilla ≫ Seamonkey Version1.0.1
Mozilla ≫ Seamonkey Version1.0.2
Mozilla ≫ Seamonkey Version1.0.3
Mozilla ≫ Seamonkey Version1.0.4
Mozilla ≫ Seamonkey Version1.0.5
Mozilla ≫ Seamonkey Version1.0.6
Mozilla ≫ Seamonkey Version1.0.7
Mozilla ≫ Seamonkey Version1.0.8
Mozilla ≫ Seamonkey Version1.0.9
Mozilla ≫ Seamonkey Version1.1
Mozilla ≫ Seamonkey Version1.1 Updatealpha
Mozilla ≫ Seamonkey Version1.1 Updatebeta
Mozilla ≫ Seamonkey Version1.1.1
Mozilla ≫ Seamonkey Version1.1.2
Mozilla ≫ Seamonkey Version1.1.3
Mozilla ≫ Seamonkey Version1.1.4
Mozilla ≫ Seamonkey Version1.1.5
Mozilla ≫ Seamonkey Version1.1.6
Mozilla ≫ Seamonkey Version1.1.7
Mozilla ≫ Seamonkey Version1.1.8
Mozilla ≫ Seamonkey Version1.1.9
Mozilla ≫ Seamonkey Version1.1.10
Mozilla ≫ Seamonkey Version1.1.11
Mozilla ≫ Seamonkey Version1.1.12
Mozilla ≫ Seamonkey Version1.1.13
Mozilla ≫ Seamonkey Version1.1.14
Mozilla ≫ Seamonkey Version1.1.15
Mozilla ≫ Seamonkey Version1.1.16
Mozilla ≫ Seamonkey Version1.1.17
Mozilla ≫ Seamonkey Version1.1.18
Mozilla ≫ Seamonkey Version1.1.19
Mozilla ≫ Seamonkey Version1.5.0.8
Mozilla ≫ Seamonkey Version1.5.0.9
Mozilla ≫ Seamonkey Version1.5.0.10
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.0.12
Mozilla ≫ Firefox Version <= 3.5.18
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0 Updatepreview_release
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5 Updatebeta1
Mozilla ≫ Firefox Version1.5 Updatebeta2
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.0.12
Mozilla ≫ Firefox Version1.5.1
Mozilla ≫ Firefox Version1.5.2
Mozilla ≫ Firefox Version1.5.3
Mozilla ≫ Firefox Version1.5.4
Mozilla ≫ Firefox Version1.5.5
Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.7
Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
Mozilla ≫ Firefox Version2.0.0.4
Mozilla ≫ Firefox Version2.0.0.5
Mozilla ≫ Firefox Version2.0.0.6
Mozilla ≫ Firefox Version2.0.0.7
Mozilla ≫ Firefox Version2.0.0.8
Mozilla ≫ Firefox Version2.0.0.9
Mozilla ≫ Firefox Version2.0.0.10
Mozilla ≫ Firefox Version2.0.0.11
Mozilla ≫ Firefox Version2.0.0.12
Mozilla ≫ Firefox Version2.0.0.13
Mozilla ≫ Firefox Version2.0.0.14
Mozilla ≫ Firefox Version2.0.0.15
Mozilla ≫ Firefox Version2.0.0.16
Mozilla ≫ Firefox Version2.0.0.17
Mozilla ≫ Firefox Version2.0.0.18
Mozilla ≫ Firefox Version2.0.0.19
Mozilla ≫ Firefox Version2.0.0.20
Mozilla ≫ Firefox Version3.0
Mozilla ≫ Firefox Version3.0.1
Mozilla ≫ Firefox Version3.0.2
Mozilla ≫ Firefox Version3.0.3
Mozilla ≫ Firefox Version3.0.4
Mozilla ≫ Firefox Version3.0.5
Mozilla ≫ Firefox Version3.0.6
Mozilla ≫ Firefox Version3.0.7
Mozilla ≫ Firefox Version3.0.8
Mozilla ≫ Firefox Version3.0.9
Mozilla ≫ Firefox Version3.0.10
Mozilla ≫ Firefox Version3.0.11
Mozilla ≫ Firefox Version3.0.12
Mozilla ≫ Firefox Version3.0.13
Mozilla ≫ Firefox Version3.0.14
Mozilla ≫ Firefox Version3.0.15
Mozilla ≫ Firefox Version3.0.16
Mozilla ≫ Firefox Version3.0.17
Mozilla ≫ Firefox Version3.5
Mozilla ≫ Firefox Version3.5.1
Mozilla ≫ Firefox Version3.5.2
Mozilla ≫ Firefox Version3.5.3
Mozilla ≫ Firefox Version3.5.4
Mozilla ≫ Firefox Version3.5.5
Mozilla ≫ Firefox Version3.5.6
Mozilla ≫ Firefox Version3.5.7
Mozilla ≫ Firefox Version3.5.8
Mozilla ≫ Firefox Version3.5.9
Mozilla ≫ Firefox Version3.5.10
Mozilla ≫ Firefox Version3.5.11
Mozilla ≫ Firefox Version3.5.12
Mozilla ≫ Firefox Version3.5.13
Mozilla ≫ Firefox Version3.5.14
Mozilla ≫ Firefox Version3.5.15
Mozilla ≫ Firefox Version3.5.16
Mozilla ≫ Firefox Version3.5.17
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 70.01% 0.993
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://downloads.avaya.com/css/P8/documents/100144158
http://www.mandriva.com/security/advisories?name=MDVSA-2011:079
http://www.debian.org/security/2011/dsa-2227
http://www.debian.org/security/2011/dsa-2228
http://www.debian.org/security/2011/dsa-2235
http://www.mozilla.org/security/announce/2011/mfsa2011-13.html
Vendor Advisory
http://downloads.avaya.com/css/P8/documents/100134543
http://securityreason.com/securityalert/8310
https://bugzilla.mozilla.org/show_bug.cgi?id=630919
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020