7.5

CVE-2011-3665

Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version4.0
Mozilla ≫ Firefox Version4.0 Updatebeta1
Mozilla ≫ Firefox Version4.0 Updatebeta10
Mozilla ≫ Firefox Version4.0 Updatebeta11
Mozilla ≫ Firefox Version4.0 Updatebeta12
Mozilla ≫ Firefox Version4.0 Updatebeta2
Mozilla ≫ Firefox Version4.0 Updatebeta3
Mozilla ≫ Firefox Version4.0 Updatebeta4
Mozilla ≫ Firefox Version4.0 Updatebeta5
Mozilla ≫ Firefox Version4.0 Updatebeta6
Mozilla ≫ Firefox Version4.0 Updatebeta7
Mozilla ≫ Firefox Version4.0 Updatebeta8
Mozilla ≫ Firefox Version4.0 Updatebeta9
Mozilla ≫ Firefox Version4.0.1
Mozilla ≫ Firefox Version5.0
Mozilla ≫ Firefox Version5.0.1
Mozilla ≫ Firefox Version6.0
Mozilla ≫ Firefox Version6.0.1
Mozilla ≫ Firefox Version6.0.2
Mozilla ≫ Firefox Version7.0
Mozilla ≫ Firefox Version7.0.1
Mozilla ≫ Firefox Version8.0
Mozilla ≫ Seamonkey Version <= 2.5
Mozilla ≫ Seamonkey Version1.0
Mozilla ≫ Seamonkey Version1.0 Editionalpha
Mozilla ≫ Seamonkey Version1.0 Editionbeta
Mozilla ≫ Seamonkey Version1.0 Editiondev
Mozilla ≫ Seamonkey Version1.0 Updatealpha
Mozilla ≫ Seamonkey Version1.0 Updatebeta
Mozilla ≫ Seamonkey Version1.0.1
Mozilla ≫ Seamonkey Version1.0.2
Mozilla ≫ Seamonkey Version1.0.3
Mozilla ≫ Seamonkey Version1.0.4
Mozilla ≫ Seamonkey Version1.0.5
Mozilla ≫ Seamonkey Version1.0.6
Mozilla ≫ Seamonkey Version1.0.7
Mozilla ≫ Seamonkey Version1.0.8
Mozilla ≫ Seamonkey Version1.0.9
Mozilla ≫ Seamonkey Version1.0.99
Mozilla ≫ Seamonkey Version1.1
Mozilla ≫ Seamonkey Version1.1 Updatealpha
Mozilla ≫ Seamonkey Version1.1 Updatebeta
Mozilla ≫ Seamonkey Version1.1.1
Mozilla ≫ Seamonkey Version1.1.2
Mozilla ≫ Seamonkey Version1.1.3
Mozilla ≫ Seamonkey Version1.1.4
Mozilla ≫ Seamonkey Version1.1.5
Mozilla ≫ Seamonkey Version1.1.5 Update1.1.10
Mozilla ≫ Seamonkey Version1.1.6
Mozilla ≫ Seamonkey Version1.1.7
Mozilla ≫ Seamonkey Version1.1.8
Mozilla ≫ Seamonkey Version1.1.9
Mozilla ≫ Seamonkey Version1.1.10
Mozilla ≫ Seamonkey Version1.1.11
Mozilla ≫ Seamonkey Version1.1.12
Mozilla ≫ Seamonkey Version1.1.13
Mozilla ≫ Seamonkey Version1.1.14
Mozilla ≫ Seamonkey Version1.1.15
Mozilla ≫ Seamonkey Version1.1.16
Mozilla ≫ Seamonkey Version1.1.17
Mozilla ≫ Seamonkey Version1.1.18
Mozilla ≫ Seamonkey Version1.1.19
Mozilla ≫ Seamonkey Version1.5.0.8
Mozilla ≫ Seamonkey Version1.5.0.9
Mozilla ≫ Seamonkey Version1.5.0.10
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.0.12
Mozilla ≫ Seamonkey Version2.0.13
Mozilla ≫ Seamonkey Version2.0.14
Mozilla ≫ Seamonkey Version2.0a1 Editionpre
Mozilla ≫ Seamonkey Version2.0a1pre
Mozilla ≫ Seamonkey Version2.1 Updatealpha1
Mozilla ≫ Seamonkey Version2.1 Updatealpha2
Mozilla ≫ Seamonkey Version2.1 Updatealpha3
Mozilla ≫ Seamonkey Version2.3.3
Mozilla ≫ Thunderbird Version5.0
Mozilla ≫ Thunderbird Version6.0
Mozilla ≫ Thunderbird Version6.0.1
Mozilla ≫ Thunderbird Version6.0.2
Mozilla ≫ Thunderbird Version7.0
Mozilla ≫ Thunderbird Version7.0.1
Mozilla ≫ Thunderbird Version8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.63% 0.835
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html
http://secunia.com/advisories/47302
http://secunia.com/advisories/47334
http://www.mandriva.com/security/advisories?name=MDVSA-2011:192
http://www.securitytracker.com/id?1026445
http://www.securitytracker.com/id?1026446
http://www.securitytracker.com/id?1026447
http://osvdb.org/77956
http://www.mozilla.org/security/announce/2011/mfsa2011-58.html
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=701259
https://exchange.xforce.ibmcloud.com/vulnerabilities/71913
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14640