CVE-2011-3005

EPSS 3.98%
Veröffentlicht 29.09.2011 00:55:01
Zuletzt bearbeitet 16.06.2026 23:32:24
Erkennungen
Login

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

NVD 186 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version 4.0

Mozilla ≫ Firefox Version 4.0 Update beta1

Mozilla ≫ Firefox Version 4.0 Update beta10

Mozilla ≫ Firefox Version 4.0 Update beta11

Mozilla ≫ Firefox Version 4.0 Update beta12

Mozilla ≫ Firefox Version 4.0 Update beta2

Mozilla ≫ Firefox Version 4.0 Update beta3

Mozilla ≫ Firefox Version 4.0 Update beta4

Mozilla ≫ Firefox Version 4.0 Update beta5

Mozilla ≫ Firefox Version 4.0 Update beta6

Mozilla ≫ Firefox Version 4.0 Update beta7

Mozilla ≫ Firefox Version 4.0 Update beta8

Mozilla ≫ Firefox Version 4.0 Update beta9

Mozilla ≫ Firefox Version 4.0.1

Mozilla ≫ Firefox Version 5.0

Mozilla ≫ Firefox Version 6.0

Mozilla ≫ Thunderbird Version <= 6.0.2

Mozilla ≫ Thunderbird Version 0.1

Mozilla ≫ Thunderbird Version 0.2

Mozilla ≫ Thunderbird Version 0.3

Mozilla ≫ Thunderbird Version 0.4

Mozilla ≫ Thunderbird Version 0.5

Mozilla ≫ Thunderbird Version 0.6

Mozilla ≫ Thunderbird Version 0.7

Mozilla ≫ Thunderbird Version 0.7.1

Mozilla ≫ Thunderbird Version 0.7.2

Mozilla ≫ Thunderbird Version 0.7.3

Mozilla ≫ Thunderbird Version 0.8

Mozilla ≫ Thunderbird Version 0.9

Mozilla ≫ Thunderbird Version 1.0

Mozilla ≫ Thunderbird Version 1.0.1

Mozilla ≫ Thunderbird Version 1.0.2

Mozilla ≫ Thunderbird Version 1.0.3

Mozilla ≫ Thunderbird Version 1.0.4

Mozilla ≫ Thunderbird Version 1.0.5

Mozilla ≫ Thunderbird Version 1.0.5 Update beta

Mozilla ≫ Thunderbird Version 1.0.6

Mozilla ≫ Thunderbird Version 1.0.7

Mozilla ≫ Thunderbird Version 1.0.8

Mozilla ≫ Thunderbird Version 1.5

Mozilla ≫ Thunderbird Version 1.5 Update beta2

Mozilla ≫ Thunderbird Version 1.5.0.1

Mozilla ≫ Thunderbird Version 1.5.0.2

Mozilla ≫ Thunderbird Version 1.5.0.3

Mozilla ≫ Thunderbird Version 1.5.0.4

Mozilla ≫ Thunderbird Version 1.5.0.5

Mozilla ≫ Thunderbird Version 1.5.0.6

Mozilla ≫ Thunderbird Version 1.5.0.7

Mozilla ≫ Thunderbird Version 1.5.0.8

Mozilla ≫ Thunderbird Version 1.5.0.9

Mozilla ≫ Thunderbird Version 1.5.0.10

Mozilla ≫ Thunderbird Version 1.5.0.11

Mozilla ≫ Thunderbird Version 1.5.0.12

Mozilla ≫ Thunderbird Version 1.5.0.13

Mozilla ≫ Thunderbird Version 1.5.0.14

Mozilla ≫ Thunderbird Version 1.5.1

Mozilla ≫ Thunderbird Version 1.5.2

Mozilla ≫ Thunderbird Version 1.7.1

Mozilla ≫ Thunderbird Version 1.7.3

Mozilla ≫ Thunderbird Version 2.0

Mozilla ≫ Thunderbird Version 2.0.0.0

Mozilla ≫ Thunderbird Version 2.0.0.1

Mozilla ≫ Thunderbird Version 2.0.0.2

Mozilla ≫ Thunderbird Version 2.0.0.3

Mozilla ≫ Thunderbird Version 2.0.0.4

Mozilla ≫ Thunderbird Version 2.0.0.5

Mozilla ≫ Thunderbird Version 2.0.0.6

Mozilla ≫ Thunderbird Version 2.0.0.7

Mozilla ≫ Thunderbird Version 2.0.0.8

Mozilla ≫ Thunderbird Version 2.0.0.9

Mozilla ≫ Thunderbird Version 2.0.0.11

Mozilla ≫ Thunderbird Version 2.0.0.12

Mozilla ≫ Thunderbird Version 2.0.0.13

Mozilla ≫ Thunderbird Version 2.0.0.14

Mozilla ≫ Thunderbird Version 2.0.0.15

Mozilla ≫ Thunderbird Version 2.0.0.16

Mozilla ≫ Thunderbird Version 2.0.0.17

Mozilla ≫ Thunderbird Version 2.0.0.18

Mozilla ≫ Thunderbird Version 2.0.0.19

Mozilla ≫ Thunderbird Version 2.0.0.20

Mozilla ≫ Thunderbird Version 2.0.0.21

Mozilla ≫ Thunderbird Version 2.0.0.22

Mozilla ≫ Thunderbird Version 2.0.0.23

Mozilla ≫ Thunderbird Version 2.0_.4

Mozilla ≫ Thunderbird Version 2.0_.5

Mozilla ≫ Thunderbird Version 2.0_.6

Mozilla ≫ Thunderbird Version 2.0_.9

Mozilla ≫ Thunderbird Version 2.0_.12

Mozilla ≫ Thunderbird Version 2.0_.13

Mozilla ≫ Thunderbird Version 2.0_.14

Mozilla ≫ Thunderbird Version 2.0_8

Mozilla ≫ Thunderbird Version 3.0

Mozilla ≫ Thunderbird Version 3.0.1

Mozilla ≫ Thunderbird Version 3.0.2

Mozilla ≫ Thunderbird Version 3.0.3

Mozilla ≫ Thunderbird Version 3.0.4

Mozilla ≫ Thunderbird Version 3.0.5

Mozilla ≫ Thunderbird Version 3.0.6

Mozilla ≫ Thunderbird Version 3.0.7

Mozilla ≫ Thunderbird Version 3.0.8

Mozilla ≫ Thunderbird Version 3.0.9

Mozilla ≫ Thunderbird Version 3.0.10

Mozilla ≫ Thunderbird Version 3.0.11

Mozilla ≫ Thunderbird Version 3.1

Mozilla ≫ Thunderbird Version 3.1.1

Mozilla ≫ Thunderbird Version 3.1.2

Mozilla ≫ Thunderbird Version 3.1.3

Mozilla ≫ Thunderbird Version 3.1.4

Mozilla ≫ Thunderbird Version 3.1.5

Mozilla ≫ Thunderbird Version 3.1.6

Mozilla ≫ Thunderbird Version 3.1.7

Mozilla ≫ Thunderbird Version 3.1.8

Mozilla ≫ Thunderbird Version 3.1.9

Mozilla ≫ Thunderbird Version 3.1.10

Mozilla ≫ Thunderbird Version 3.1.11

Mozilla ≫ Thunderbird Version 5.0

Mozilla ≫ Seamonkey Version <= 2.3.3

Mozilla ≫ Seamonkey Version 1.0

Mozilla ≫ Seamonkey Version 1.0 Edition alpha

Mozilla ≫ Seamonkey Version 1.0 Edition beta

Mozilla ≫ Seamonkey Version 1.0 Edition dev

Mozilla ≫ Seamonkey Version 1.0 Update alpha

Mozilla ≫ Seamonkey Version 1.0 Update beta

Mozilla ≫ Seamonkey Version 1.0.1

Mozilla ≫ Seamonkey Version 1.0.2

Mozilla ≫ Seamonkey Version 1.0.3

Mozilla ≫ Seamonkey Version 1.0.4

Mozilla ≫ Seamonkey Version 1.0.5

Mozilla ≫ Seamonkey Version 1.0.6

Mozilla ≫ Seamonkey Version 1.0.7

Mozilla ≫ Seamonkey Version 1.0.8

Mozilla ≫ Seamonkey Version 1.0.9

Mozilla ≫ Seamonkey Version 1.0.99

Mozilla ≫ Seamonkey Version 1.1

Mozilla ≫ Seamonkey Version 1.1 Update alpha

Mozilla ≫ Seamonkey Version 1.1 Update beta

Mozilla ≫ Seamonkey Version 1.1.1

Mozilla ≫ Seamonkey Version 1.1.2

Mozilla ≫ Seamonkey Version 1.1.3

Mozilla ≫ Seamonkey Version 1.1.4

Mozilla ≫ Seamonkey Version 1.1.5

Mozilla ≫ Seamonkey Version 1.1.5 Update 1.1.10

Mozilla ≫ Seamonkey Version 1.1.6

Mozilla ≫ Seamonkey Version 1.1.7

Mozilla ≫ Seamonkey Version 1.1.8

Mozilla ≫ Seamonkey Version 1.1.9

Mozilla ≫ Seamonkey Version 1.1.10

Mozilla ≫ Seamonkey Version 1.1.11

Mozilla ≫ Seamonkey Version 1.1.12

Mozilla ≫ Seamonkey Version 1.1.13

Mozilla ≫ Seamonkey Version 1.1.14

Mozilla ≫ Seamonkey Version 1.1.15

Mozilla ≫ Seamonkey Version 1.1.16

Mozilla ≫ Seamonkey Version 1.1.17

Mozilla ≫ Seamonkey Version 1.1.18

Mozilla ≫ Seamonkey Version 1.1.19

Mozilla ≫ Seamonkey Version 1.5.0.8

Mozilla ≫ Seamonkey Version 1.5.0.9

Mozilla ≫ Seamonkey Version 1.5.0.10

Mozilla ≫ Seamonkey Version 2.0

Mozilla ≫ Seamonkey Version 2.0 Update alpha_1

Mozilla ≫ Seamonkey Version 2.0 Update alpha_2

Mozilla ≫ Seamonkey Version 2.0 Update alpha_3

Mozilla ≫ Seamonkey Version 2.0 Update beta_1

Mozilla ≫ Seamonkey Version 2.0 Update beta_2

Mozilla ≫ Seamonkey Version 2.0 Update rc1

Mozilla ≫ Seamonkey Version 2.0 Update rc2

Mozilla ≫ Seamonkey Version 2.0.1

Mozilla ≫ Seamonkey Version 2.0.2

Mozilla ≫ Seamonkey Version 2.0.3

Mozilla ≫ Seamonkey Version 2.0.4

Mozilla ≫ Seamonkey Version 2.0.5

Mozilla ≫ Seamonkey Version 2.0.6

Mozilla ≫ Seamonkey Version 2.0.7

Mozilla ≫ Seamonkey Version 2.0.8

Mozilla ≫ Seamonkey Version 2.0.9

Mozilla ≫ Seamonkey Version 2.0.10

Mozilla ≫ Seamonkey Version 2.0.11

Mozilla ≫ Seamonkey Version 2.0.12

Mozilla ≫ Seamonkey Version 2.0.13

Mozilla ≫ Seamonkey Version 2.0.14

Mozilla ≫ Seamonkey Version 2.0a1 Edition pre

Mozilla ≫ Seamonkey Version 2.0a1pre

Mozilla ≫ Seamonkey Version 2.1 Update alpha1

Mozilla ≫ Seamonkey Version 2.1 Update alpha2

Mozilla ≫ Seamonkey Version 2.1 Update alpha3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.98%	0.895

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/49055

http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html

http://secunia.com/advisories/46315

http://www.mandriva.com/security/advisories?name=MDVSA-2011:141

http://www.mandriva.com/security/advisories?name=MDVSA-2011:142

http://www.mozilla.org/security/announce/2011/mfsa2011-44.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=675747

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14352

https://nvd.nist.gov/vuln/detail/CVE-2011-3005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3005

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2011-3005