critical10.0Public exploit code

CVE-2011-2371

Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.1…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (Metasploit) (2)2011-10-13 · remote · windows · Verified
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (1)2011-10-12 · remote · windows · Verified
Mozilla Firefox 4.0.1 - 'Array.reduceRight()' Remote Overflow2012-02-27 · remote · windows

Impact

Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.

Affected products

Vendor	Product	Affected versions
Mozilla	Seamonkey	Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
Mozilla	Firefox	through 3.6.17 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
Mozilla	Thunderbird	through 3.1.10 Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-189

Public exploit code

Impact

Affected products

Weakness classification

References