critical10.0
CVE-2011-2987
Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird be…
Impact
Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 4.0, 4.0.1, 5.0 |
| Mozilla | Thunderbird | through 5.0 Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
| Mozilla | Seamonkey | Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html
- http://secunia.com/advisories/49055
- http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
- http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
- http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
- http://www.securityfocus.com/bid/49226
- https://bugzilla.mozilla.org/show_bug.cgi?id=665934
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14285
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html
- http://secunia.com/advisories/49055
- http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
- http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
- http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
- http://www.securityfocus.com/bid/49226
- https://bugzilla.mozilla.org/show_bug.cgi?id=665934
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14285