CVE-2011-3005

EPSS 3.36%
Published 29.09.2011 00:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.

Affected products Warnungen 0 Metrics 2 CWE 1 References 11

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version4.0

Mozilla ≫ Firefox Version4.0 Updatebeta1

Mozilla ≫ Firefox Version4.0 Updatebeta10

Mozilla ≫ Firefox Version4.0 Updatebeta11

Mozilla ≫ Firefox Version4.0 Updatebeta12

Mozilla ≫ Firefox Version4.0 Updatebeta2

Mozilla ≫ Firefox Version4.0 Updatebeta3

Mozilla ≫ Firefox Version4.0 Updatebeta4

Mozilla ≫ Firefox Version4.0 Updatebeta5

Mozilla ≫ Firefox Version4.0 Updatebeta6

Mozilla ≫ Firefox Version4.0 Updatebeta7

Mozilla ≫ Firefox Version4.0 Updatebeta8

Mozilla ≫ Firefox Version4.0 Updatebeta9

Mozilla ≫ Firefox Version4.0.1

Mozilla ≫ Firefox Version5.0

Mozilla ≫ Firefox Version6.0

Mozilla ≫ Thunderbird Version <= 6.0.2

Mozilla ≫ Thunderbird Version0.1

Mozilla ≫ Thunderbird Version0.2

Mozilla ≫ Thunderbird Version0.3

Mozilla ≫ Thunderbird Version0.4

Mozilla ≫ Thunderbird Version0.5

Mozilla ≫ Thunderbird Version0.6

Mozilla ≫ Thunderbird Version0.7

Mozilla ≫ Thunderbird Version0.7.1

Mozilla ≫ Thunderbird Version0.7.2

Mozilla ≫ Thunderbird Version0.7.3

Mozilla ≫ Thunderbird Version0.8

Mozilla ≫ Thunderbird Version0.9

Mozilla ≫ Thunderbird Version1.0

Mozilla ≫ Thunderbird Version1.0.1

Mozilla ≫ Thunderbird Version1.0.2

Mozilla ≫ Thunderbird Version1.0.3

Mozilla ≫ Thunderbird Version1.0.4

Mozilla ≫ Thunderbird Version1.0.5

Mozilla ≫ Thunderbird Version1.0.5 Updatebeta

Mozilla ≫ Thunderbird Version1.0.6

Mozilla ≫ Thunderbird Version1.0.7

Mozilla ≫ Thunderbird Version1.0.8

Mozilla ≫ Thunderbird Version1.5

Mozilla ≫ Thunderbird Version1.5 Updatebeta2

Mozilla ≫ Thunderbird Version1.5.0.1

Mozilla ≫ Thunderbird Version1.5.0.2

Mozilla ≫ Thunderbird Version1.5.0.3

Mozilla ≫ Thunderbird Version1.5.0.4

Mozilla ≫ Thunderbird Version1.5.0.5

Mozilla ≫ Thunderbird Version1.5.0.6

Mozilla ≫ Thunderbird Version1.5.0.7

Mozilla ≫ Thunderbird Version1.5.0.8

Mozilla ≫ Thunderbird Version1.5.0.9

Mozilla ≫ Thunderbird Version1.5.0.10

Mozilla ≫ Thunderbird Version1.5.0.11

Mozilla ≫ Thunderbird Version1.5.0.12

Mozilla ≫ Thunderbird Version1.5.0.13

Mozilla ≫ Thunderbird Version1.5.0.14

Mozilla ≫ Thunderbird Version1.5.1

Mozilla ≫ Thunderbird Version1.5.2

Mozilla ≫ Thunderbird Version1.7.1

Mozilla ≫ Thunderbird Version1.7.3

Mozilla ≫ Thunderbird Version2.0

Mozilla ≫ Thunderbird Version2.0.0.0

Mozilla ≫ Thunderbird Version2.0.0.1

Mozilla ≫ Thunderbird Version2.0.0.2

Mozilla ≫ Thunderbird Version2.0.0.3

Mozilla ≫ Thunderbird Version2.0.0.4

Mozilla ≫ Thunderbird Version2.0.0.5

Mozilla ≫ Thunderbird Version2.0.0.6

Mozilla ≫ Thunderbird Version2.0.0.7

Mozilla ≫ Thunderbird Version2.0.0.8

Mozilla ≫ Thunderbird Version2.0.0.9

Mozilla ≫ Thunderbird Version2.0.0.11

Mozilla ≫ Thunderbird Version2.0.0.12

Mozilla ≫ Thunderbird Version2.0.0.13

Mozilla ≫ Thunderbird Version2.0.0.14

Mozilla ≫ Thunderbird Version2.0.0.15

Mozilla ≫ Thunderbird Version2.0.0.16

Mozilla ≫ Thunderbird Version2.0.0.17

Mozilla ≫ Thunderbird Version2.0.0.18

Mozilla ≫ Thunderbird Version2.0.0.19

Mozilla ≫ Thunderbird Version2.0.0.20

Mozilla ≫ Thunderbird Version2.0.0.21

Mozilla ≫ Thunderbird Version2.0.0.22

Mozilla ≫ Thunderbird Version2.0.0.23

Mozilla ≫ Thunderbird Version2.0_.4

Mozilla ≫ Thunderbird Version2.0_.5

Mozilla ≫ Thunderbird Version2.0_.6

Mozilla ≫ Thunderbird Version2.0_.9

Mozilla ≫ Thunderbird Version2.0_.12

Mozilla ≫ Thunderbird Version2.0_.13

Mozilla ≫ Thunderbird Version2.0_.14

Mozilla ≫ Thunderbird Version2.0_8

Mozilla ≫ Thunderbird Version3.0

Mozilla ≫ Thunderbird Version3.0.1

Mozilla ≫ Thunderbird Version3.0.2

Mozilla ≫ Thunderbird Version3.0.3

Mozilla ≫ Thunderbird Version3.0.4

Mozilla ≫ Thunderbird Version3.0.5

Mozilla ≫ Thunderbird Version3.0.6

Mozilla ≫ Thunderbird Version3.0.7

Mozilla ≫ Thunderbird Version3.0.8

Mozilla ≫ Thunderbird Version3.0.9

Mozilla ≫ Thunderbird Version3.0.10

Mozilla ≫ Thunderbird Version3.0.11

Mozilla ≫ Thunderbird Version3.1

Mozilla ≫ Thunderbird Version3.1.1

Mozilla ≫ Thunderbird Version3.1.2

Mozilla ≫ Thunderbird Version3.1.3

Mozilla ≫ Thunderbird Version3.1.4

Mozilla ≫ Thunderbird Version3.1.5

Mozilla ≫ Thunderbird Version3.1.6

Mozilla ≫ Thunderbird Version3.1.7

Mozilla ≫ Thunderbird Version3.1.8

Mozilla ≫ Thunderbird Version3.1.9

Mozilla ≫ Thunderbird Version3.1.10

Mozilla ≫ Thunderbird Version3.1.11

Mozilla ≫ Thunderbird Version5.0

Mozilla ≫ Seamonkey Version <= 2.3.3

Mozilla ≫ Seamonkey Version1.0

Mozilla ≫ Seamonkey Version1.0 Editionalpha

Mozilla ≫ Seamonkey Version1.0 Editionbeta

Mozilla ≫ Seamonkey Version1.0 Editiondev

Mozilla ≫ Seamonkey Version1.0 Updatealpha

Mozilla ≫ Seamonkey Version1.0 Updatebeta

Mozilla ≫ Seamonkey Version1.0.1

Mozilla ≫ Seamonkey Version1.0.2

Mozilla ≫ Seamonkey Version1.0.3

Mozilla ≫ Seamonkey Version1.0.4

Mozilla ≫ Seamonkey Version1.0.5

Mozilla ≫ Seamonkey Version1.0.6

Mozilla ≫ Seamonkey Version1.0.7

Mozilla ≫ Seamonkey Version1.0.8

Mozilla ≫ Seamonkey Version1.0.9

Mozilla ≫ Seamonkey Version1.0.99

Mozilla ≫ Seamonkey Version1.1

Mozilla ≫ Seamonkey Version1.1 Updatealpha

Mozilla ≫ Seamonkey Version1.1 Updatebeta

Mozilla ≫ Seamonkey Version1.1.1

Mozilla ≫ Seamonkey Version1.1.2

Mozilla ≫ Seamonkey Version1.1.3

Mozilla ≫ Seamonkey Version1.1.4

Mozilla ≫ Seamonkey Version1.1.5

Mozilla ≫ Seamonkey Version1.1.5 Update1.1.10

Mozilla ≫ Seamonkey Version1.1.6

Mozilla ≫ Seamonkey Version1.1.7

Mozilla ≫ Seamonkey Version1.1.8

Mozilla ≫ Seamonkey Version1.1.9

Mozilla ≫ Seamonkey Version1.1.10

Mozilla ≫ Seamonkey Version1.1.11

Mozilla ≫ Seamonkey Version1.1.12

Mozilla ≫ Seamonkey Version1.1.13

Mozilla ≫ Seamonkey Version1.1.14

Mozilla ≫ Seamonkey Version1.1.15

Mozilla ≫ Seamonkey Version1.1.16

Mozilla ≫ Seamonkey Version1.1.17

Mozilla ≫ Seamonkey Version1.1.18

Mozilla ≫ Seamonkey Version1.1.19

Mozilla ≫ Seamonkey Version1.5.0.8

Mozilla ≫ Seamonkey Version1.5.0.9

Mozilla ≫ Seamonkey Version1.5.0.10

Mozilla ≫ Seamonkey Version2.0

Mozilla ≫ Seamonkey Version2.0 Updatealpha_1

Mozilla ≫ Seamonkey Version2.0 Updatealpha_2

Mozilla ≫ Seamonkey Version2.0 Updatealpha_3

Mozilla ≫ Seamonkey Version2.0 Updatebeta_1

Mozilla ≫ Seamonkey Version2.0 Updatebeta_2

Mozilla ≫ Seamonkey Version2.0 Updaterc1

Mozilla ≫ Seamonkey Version2.0 Updaterc2

Mozilla ≫ Seamonkey Version2.0.1

Mozilla ≫ Seamonkey Version2.0.2

Mozilla ≫ Seamonkey Version2.0.3

Mozilla ≫ Seamonkey Version2.0.4

Mozilla ≫ Seamonkey Version2.0.5

Mozilla ≫ Seamonkey Version2.0.6

Mozilla ≫ Seamonkey Version2.0.7

Mozilla ≫ Seamonkey Version2.0.8

Mozilla ≫ Seamonkey Version2.0.9

Mozilla ≫ Seamonkey Version2.0.10

Mozilla ≫ Seamonkey Version2.0.11

Mozilla ≫ Seamonkey Version2.0.12

Mozilla ≫ Seamonkey Version2.0.13

Mozilla ≫ Seamonkey Version2.0.14

Mozilla ≫ Seamonkey Version2.0a1 Editionpre

Mozilla ≫ Seamonkey Version2.0a1pre

Mozilla ≫ Seamonkey Version2.1 Updatealpha1

Mozilla ≫ Seamonkey Version2.1 Updatealpha2

Mozilla ≫ Seamonkey Version2.1 Updatealpha3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.36%	0.862

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/49055

http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html

http://secunia.com/advisories/46315

http://www.mandriva.com/security/advisories?name=MDVSA-2011:141

http://www.mandriva.com/security/advisories?name=MDVSA-2011:142

http://www.mozilla.org/security/announce/2011/mfsa2011-44.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=675747

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14352

https://nvd.nist.gov/vuln/detail/CVE-2011-3005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3005

EUVD