[Forgot Password]
Login  Register Subscribe

23631

 
 

126941

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-2989

Date: (C)2011-08-18   (M)2017-11-17 


The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

CVSS Score: 10.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECUNIA-49055
SUSE-SA:2011:037
http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
https://bugzilla.mozilla.org/show_bug.cgi?id=674042

CPE    132
cpe:/a:mozilla:seamonkey:2.1:beta3
cpe:/a:mozilla:seamonkey:2.1:beta1
cpe:/a:mozilla:seamonkey:2.1:beta2
cpe:/a:mozilla:seamonkey:2.2:beta1
...
CWE    1
CWE-119
OVAL    7
oval:org.secpod.oval:def:400321
oval:org.secpod.oval:def:400332
oval:org.secpod.oval:def:400018
oval:org.secpod.oval:def:2304
...

© 2013 SecPod Technologies