PT-2011-2048

CVE-2011-0054

Published

2011-03-02

Updated

2017-09-19

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.17 Mozilla Firefox versions 3.6.x prior to 3.6.14 SeaMonkey versions prior to 2.0.12

Description A buffer overflow issue exists in the JavaScript engine, potentially allowing remote attackers to execute arbitrary code. This issue involves vectors related to non-local JavaScript variables, specifically an "upvarMap" problem.

Recommendations For Mozilla Firefox versions prior to 3.5.17, update to version 3.5.17 or later. For Mozilla Firefox versions 3.6.x prior to 3.6.14, update to version 3.6.14 or later. For SeaMonkey versions prior to 2.0.12, update to version 2.0.12 or later.

Exploitability

Fix

Impacts

Researchers

Christian Holler

Decoder

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2011-0054