CVE-2011-2995: Critical severity firefox vulnerability
Published Sep 29, 2011
·Updated
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected Software
207 affected components
Mozilla Firefox=3.6.2
Mozilla Firefox=3.6.3
Mozilla Firefox=3.6.15
Mozilla Firefox=3.6.17
Mozilla Firefox=3.6.11
Mozilla Firefox=3.6.8
Mozilla Firefox=3.6.9
Mozilla Firefox=3.6.14
Mozilla Firefox=3.6.12
Mozilla Firefox<=3.6.22
Mozilla Firefox=3.6.6
Mozilla Firefox=3.6.21
Mozilla Firefox=3.6.16
Mozilla Firefox=3.6.10
Mozilla Firefox=3.6.19
Mozilla Firefox=3.6.7
Mozilla Firefox=3.6.4
Mozilla Firefox=3.6.18
Mozilla Firefox=3.6.20
Mozilla Firefox=3.6
Mozilla Firefox=3.6.13
Mozilla Firefox=4.0-beta6
Mozilla Firefox=4.0-beta1
Mozilla Firefox=4.0-beta9
Mozilla Firefox=4.0-beta5
Mozilla Firefox=4.0-beta8
Mozilla Firefox=4.0-beta12
Mozilla Firefox=4.0-beta3
Mozilla Firefox=5.0
Mozilla Firefox=4.0-beta2
Mozilla Firefox=4.0-beta4
Mozilla Firefox=4.0-beta10
Mozilla Firefox=4.0
Mozilla Firefox=6.0
Mozilla Firefox=4.0-beta11
Mozilla Firefox=4.0-beta7
Mozilla Firefox=4.0.1
Mozilla Thunderbird=3.0.8
Mozilla Thunderbird=3.0.5
Mozilla Thunderbird=1.5.0.7
Mozilla Thunderbird=0.6
Mozilla Thunderbird=0.7.2
Mozilla Thunderbird=3.1.8
Mozilla Thunderbird=2.0.0.4
Mozilla Thunderbird=3.1.11
Mozilla Thunderbird=3.0.9
Mozilla Thunderbird=2.0.0.6
Mozilla Thunderbird=0.3
Mozilla Thunderbird=2.0.0.21
Mozilla Thunderbird=3.0.1
Mozilla Thunderbird=3.1.7
Mozilla Thunderbird=0.2
Mozilla Thunderbird=3.1.2
Mozilla Thunderbird=3.1.9
Mozilla Thunderbird=3.1.1
Mozilla Thunderbird=2.0_.5
Mozilla Thunderbird=1.0.7
Mozilla Thunderbird=2.0.0.18
Mozilla Thunderbird=2.0.0.9
Mozilla Thunderbird=2.0_.12
Mozilla Thunderbird=2.0.0.15
Mozilla Thunderbird=2.0.0.16
Mozilla Thunderbird=2.0.0.20
Mozilla Thunderbird=2.0.0.8
Mozilla Thunderbird=2.0.0.7
Mozilla Thunderbird=1.7.1
Mozilla Thunderbird=2.0_8
Mozilla Thunderbird=1.5.0.3
Mozilla Thunderbird=1.5.0.10
Mozilla Thunderbird=1.5.0.5
Mozilla Thunderbird=3.1.4
Mozilla Thunderbird=1.5.0.6
Mozilla Thunderbird=1.0
Mozilla Thunderbird=3.0.7
Mozilla Thunderbird=2.0.0.3
Mozilla Thunderbird=3.0.6
Mozilla Thunderbird=1.0.1
Mozilla Thunderbird=1.5-beta2
Mozilla Thunderbird=2.0.0.2
Mozilla Thunderbird=3.0.10
Mozilla Thunderbird=3.0.3
Mozilla Thunderbird=1.0.2
Mozilla Thunderbird=2.0.0.0
Mozilla Thunderbird=1.5.0.13
Mozilla Thunderbird=3.1.5
Mozilla Thunderbird=3.0.11
Mozilla Thunderbird=5.0
Mozilla Thunderbird=2.0.0.12
Mozilla Thunderbird=2.0.0.22
Mozilla Thunderbird=1.5
Mozilla Thunderbird=1.5.0.2
Mozilla Thunderbird=3.1.10
Mozilla Thunderbird=2.0.0.13
Mozilla Thunderbird=2.0_.9
Mozilla Thunderbird=1.5.0.8
Mozilla Thunderbird=2.0.0.14
Mozilla Thunderbird=3.0.4
Mozilla Thunderbird=0.5
Mozilla Thunderbird=1.0.4
Mozilla Thunderbird=1.5.2
Mozilla Thunderbird=2.0.0.17
Mozilla Thunderbird=2.0.0.23
Mozilla Thunderbird=1.5.0.9
Mozilla Thunderbird=1.5.0.11
Mozilla Thunderbird=0.9
Mozilla Thunderbird=1.0.3
Mozilla Thunderbird=2.0
Mozilla Thunderbird=2.0.0.11
Mozilla Thunderbird=3.0
Mozilla Thunderbird=1.5.0.12
Mozilla Thunderbird=2.0_.13
Mozilla Thunderbird=2.0_.14
Mozilla Thunderbird=0.7.3
Mozilla Thunderbird=0.4
Mozilla Thunderbird=1.5.1
Mozilla Thunderbird=0.7
Mozilla Thunderbird=1.5.0.14
Mozilla Thunderbird=3.1
Mozilla Thunderbird=1.0.6
Mozilla Thunderbird=1.0.5-beta
Mozilla Thunderbird=3.1.3
Mozilla Thunderbird<=6.0.2
Mozilla Thunderbird=2.0.0.5
Mozilla Thunderbird=3.1.6
Mozilla Thunderbird=1.7.3
Mozilla Thunderbird=2.0.0.1
Mozilla Thunderbird=1.5.0.1
Mozilla Thunderbird=2.0_.4
Mozilla Thunderbird=1.0.8
Mozilla Thunderbird=0.1
Mozilla Thunderbird=0.7.1
Mozilla Thunderbird=1.0.5
Mozilla Thunderbird=0.8
Mozilla Thunderbird=2.0_.6
Mozilla Thunderbird=3.0.2
Mozilla Thunderbird=2.0.0.19
Mozilla Thunderbird=1.5.0.4
Mozilla SeaMonkey=2.0.10
Mozilla SeaMonkey=1.1.10
Mozilla SeaMonkey=1.0.3
Mozilla SeaMonkey=2.0.13
Mozilla SeaMonkey=1.1.8
Mozilla SeaMonkey=1.0.1
Mozilla SeaMonkey=1.1.7
Mozilla SeaMonkey=1.5.0.10
Mozilla SeaMonkey=1.0.6
Mozilla SeaMonkey=1.0.9
Mozilla SeaMonkey=1.1.3
Mozilla SeaMonkey=2.0a1pre
Mozilla SeaMonkey=2.0.4
Mozilla SeaMonkey=1.0
Mozilla SeaMonkey=2.1-alpha2
Mozilla SeaMonkey=2.0.3
Mozilla SeaMonkey=2.0.2
Mozilla SeaMonkey=1.1.17
Mozilla SeaMonkey=1.0.99
Mozilla SeaMonkey=2.0-alpha_2
Mozilla SeaMonkey=1.1.5
Mozilla SeaMonkey=2.0.8
Mozilla SeaMonkey=1.0.7
Mozilla SeaMonkey=1.0-beta
Mozilla SeaMonkey=1.1-alpha
Mozilla SeaMonkey=2.0-rc2
Mozilla SeaMonkey=2.0-alpha_3
Mozilla SeaMonkey=1.0-alpha
Mozilla SeaMonkey=2.0a1
Mozilla SeaMonkey=1.1.12
Mozilla SeaMonkey=2.0.12
Mozilla SeaMonkey=1.1
Mozilla SeaMonkey=1.1.14
Mozilla SeaMonkey=2.0.11
Mozilla SeaMonkey=1.1.2
Mozilla SeaMonkey=1.0
Mozilla SeaMonkey=2.0-beta_2
Mozilla SeaMonkey=1.0.2
Mozilla SeaMonkey=1.0.8
Mozilla SeaMonkey=1.1.11
Mozilla SeaMonkey=2.0-alpha_1
Mozilla SeaMonkey=1.5.0.9
Mozilla SeaMonkey=1.1-beta
Mozilla SeaMonkey=1.1.1
Mozilla SeaMonkey=2.0.9
Mozilla SeaMonkey=2.1-alpha1
Mozilla SeaMonkey=1.5.0.8
Mozilla SeaMonkey=1.1.5-1.1.10
Mozilla SeaMonkey=2.0.1
Mozilla SeaMonkey=1.0.5
Mozilla SeaMonkey=1.1.15
Mozilla SeaMonkey=2.0.14
Mozilla SeaMonkey=1.1.6
Mozilla SeaMonkey=2.0.7
Mozilla SeaMonkey=1.1.16
Mozilla SeaMonkey<=2.3.3
Mozilla SeaMonkey=2.0-beta_1
Mozilla SeaMonkey=1.0
Mozilla SeaMonkey=1.0
Mozilla SeaMonkey=1.1.19
Mozilla SeaMonkey=2.0.5
Mozilla SeaMonkey=2.0-rc1
Mozilla SeaMonkey=1.0.4
Mozilla SeaMonkey=1.1.9
Mozilla SeaMonkey=1.1.13
Mozilla SeaMonkey=1.1.18
Mozilla SeaMonkey=2.0.6
Mozilla SeaMonkey=2.1-alpha3
Mozilla SeaMonkey=2.0
Mozilla SeaMonkey=1.1.4
Event History
Sep 29, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2995?
CVE-2011-2995 is classified as a high severity vulnerability due to its ability to cause denial of service or potential code execution.
2
How do I fix CVE-2011-2995?
To fix CVE-2011-2995, you should upgrade Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version that is not affected.
3
Which versions are vulnerable to CVE-2011-2995?
Versions of Mozilla Firefox before 3.6.23, Thunderbird before 7.0, and SeaMonkey before 2.4 are vulnerable to CVE-2011-2995.
4
What types of attacks can CVE-2011-2995 enable?
CVE-2011-2995 can enable attackers to execute arbitrary code or crash the application leading to a denial of service.
5
How can I determine if I'm affected by CVE-2011-2995?
You can determine if you're affected by CVE-2011-2995 by checking if you are using a version of Firefox, Thunderbird, or SeaMonkey that is older than the patched versions.