NetSight
IP …
critical10.0

CVE-2011-0084

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6…

Impact

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.6.19
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaSeamonkey
Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5
MozillaThunderbird
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5

Weakness classification

CWE-94

References