CVE-2011-2368: Critical severity firefox vulnerability
Published Jun 30, 2011
·Updated
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Affected Software
14 affected components
Mozilla Firefox=4.0-beta6
Mozilla Firefox=4.0-beta1
Mozilla Firefox=4.0-beta9
Mozilla Firefox=4.0-beta5
Mozilla Firefox=4.0-beta8
Mozilla Firefox=4.0-beta12
Mozilla Firefox=4.0-beta3
Mozilla Firefox=4.0-beta2
Mozilla Firefox=4.0-beta4
Mozilla Firefox=4.0-beta10
Mozilla Firefox=4.0
Mozilla Firefox=4.0-beta11
Mozilla Firefox=4.0-beta7
Mozilla Firefox=4.0.1
Event History
Jun 30, 2011
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2368?
CVE-2011-2368 has a high severity as it can lead to remote code execution or application crash.
2
How do I fix CVE-2011-2368?
To fix CVE-2011-2368, you should update your Mozilla Firefox to the latest version available.
3
Which versions of Firefox are affected by CVE-2011-2368?
CVE-2011-2368 affects Mozilla Firefox versions 4.0 to 4.0.1 and various beta versions.
4
Can CVE-2011-2368 be exploited remotely?
Yes, CVE-2011-2368 can be exploited remotely, allowing attackers to execute arbitrary code.
5
What type of vulnerability is CVE-2011-2368?
CVE-2011-2368 is a vulnerability in the WebGL implementation of Mozilla Firefox that involves improper write restriction.