Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://www.mozilla.org/security/announce/2011/mfsa2011-24.html - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - https://bugzilla.mozilla.org/show_bug.cgi?id=616264 - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13693 - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security
rg.mitre.oval%3Adef%3A13693 - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273
CVE ID: CVE-2011-2363 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 -
r: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - https://bugzilla.mozilla.org/show_bug.cgi?id=648160 - http://www.debian.org/security/2011/dsa-2269 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14046 - http://lists
1/dsa-2269 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14046 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273 - http://www.mozilla.org/security/announce/2011/mfsa2011-23.html
CVE ID: CVE-2011-2364 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13318 - http://www.mandriva.com/security/advisories?name=MDVSA-201
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13318 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.mozilla.org/security/announce/2011/mfsa2011-19.html - https://bugzilla.mozilla.org/show_bug.cgi?id=651990 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.red
org/show_bug.cgi?id=651990 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html
CVE ID: CVE-2011-2365 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/1001453
advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.mozilla.org/security/announce/2011/mfsa2011-19.html - http://www.debian.org/security/2011/dsa-2269 - https://bugzilla.mozilla.org/show_bug.cgi?id=655742 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.secu
rg/show_bug.cgi?id=655742 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.securityfocus.com/bid/48368 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14184 - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273
CVE ID: CVE-2011-2366 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-06T23:00:33.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=655987 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14221 - https://bugzilla.mozilla.org/
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14221 - https://bugzilla.mozilla.org/show_bug.cgi?id=659349 - https://hacks.mozilla.org/2011/06/cross-domain-webgl-textures-disabled-in-firefox-5/ - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.contextis.co.uk/resources/blog/webgl/ - https://developer.mozilla.org/en/WebGL/Cross-Domain_Textures - https://bugzilla.mozilla.org/show_bug.cgi?id=656277 - http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-March/030882.html - http://www.mozilla.org/security/announce/2011/mfsa2011-25.html
CVE ID: CVE-2011-2367 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-26.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14302 - https://bu
2011-26.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14302 - https://bugzilla.mozilla.org/show_bug.cgi?id=656752 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
CVE ID: CVE-2011-2368 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-26.html - https://bugzilla.mozilla.org/show_bug.cgi?id=657201 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13912 - http://lists.ope
657201 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13912 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
CVE ID: CVE-2011-2369 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=650001 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14426 - http://www.mozilla.org/security/announce/2011/mfsa2011-27.html - http://lists.opensuse.org/opensuse-security-announce/2011-
p://www.mozilla.org/security/announce/2011/mfsa2011-27.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
CVE ID: CVE-2011-2370 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-28.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14278 - https://bugzilla.mozilla.org/show_bug.cgi?id=645699 - http://lists.opensuse.org/opensuse
Aorg.mitre.oval%3Adef%3A14278 - https://bugzilla.mozilla.org/show_bug.cgi?id=645699 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
CVE ID: CVE-2011-2371 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13987 - http://secunia.com/advisories/45002 - htt
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13987 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.mozilla.org/security/announce/2011/mfsa2011-22.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.debian.org/s
ity/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.debian.org/security/2011/dsa-2273 - http://securityreason.com/securityalert/8472 - https://bugzilla.mozilla.org/show_bug.cgi?id=664009
CVE ID: CVE-2011-2372 State: PUBLISHED Published: 2011-09-29T00:00:00 Last Updated: 2024-08-06T23:00:33.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13854 - https://bugzil
2011:139 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13854 - https://bugzilla.mozilla.org/show_bug.cgi?id=657462 - http://www.debian.org/security/2011/dsa-2312 - http://secunia.com/advisories/46315 - http://www.redhat.com/support/errata/RHSA-2011-1341.html - http://www.mozilla.org/security/announce/2011/mfsa2011-40.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:142 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html - http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=662309 - h
tp://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=662309 - http://www.debian.org/security/2011/dsa-2317 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:140 - http://www.debian.org/security/2011/dsa-2313 - https://bugzilla.mozilla.org/show_bug.cgi?id=663899
CVE ID: CVE-2011-2373 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.
002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14178 - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.mozilla.org/security/announce/2011/mfsa2011-20.html - https://bugzilla.mozilla.org/show_bug.cgi?id=617247 - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/m
d=617247 - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.debian.org/security/2011/dsa-2273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68133
CVE ID: CVE-2011-2374 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=639648 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - https://bugzilla.mozilla.org/show_bug.cgi?id=643051
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - https://bugzilla.mozilla.org/show_bug.cgi?id=643051 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=629858 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68128 - https://oval.cisecurity.org/repository/search/definit
tml - https://exchange.xforce.ibmcloud.com/vulnerabilities/68128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14123 - http://www.mozilla.org/security/announce/2011/mfsa2011-19.html - https://bugzilla.mozilla.org/show_bug.cgi?id=642338 - https://bugzilla.mozilla.org/show_bug.cgi?id=645572 - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - https://bugzilla.mozilla.org/show_bug.cgi?id=646662 - https://bugzilla.mozilla.org/show_bug.cgi?id=626262 - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273 - https://bugzilla.mozilla.or
dhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273 - https://bugzilla.mozilla.org/show_bug.cgi?id=642734
CVE ID: CVE-2011-2375 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=653238 - https://bugzilla.mozilla.org/show_bug.cgi?id=654015 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - https://oval.cisecurity
a.org/show_bug.cgi?id=654015 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14071 - https://bugzilla.mozilla.org/show_bug.cgi?id=648705 - https://bugzilla.mozilla.org/show_bug.cgi?id=597162 - http://support.avaya.com/css/P8/documents/100145333 - https://bugzilla.mozilla.org/show_bug.cgi?id=653026 - https://bugzilla.mozilla.org/show_bug.cgi?id=652401 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.redhat.com/support/errata/RHSA-2011-0888.html - https:/
//www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.redhat.com/support/errata/RHSA-2011-0888.html - https://bugzilla.mozilla.org/show_bug.cgi?id=643927 - http://www.mozilla.org/security/announce/2011/mfsa2011-19.html - https://bugzilla.mozilla.org/show_bug.cgi?id=648022 - http://www.redhat.com/support/errata/RHSA-2011-0886.html - https://bugzilla.mozilla.org/show_bug.cgi?id=643839
CVE ID: CVE-2011-2376 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - https://bugzilla.mozilla.org/show_bug.cgi?id=650874 - http://support.avaya.com/css/P8/docum
cunia.com/advisories/45002 - https://bugzilla.mozilla.org/show_bug.cgi?id=650874 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=635235 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.mozilla.org/security/announce/2011/mfsa2011-19.html - http://www.debian.org/security/2011/dsa-2269 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
www.debian.org/security/2011/dsa-2269 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14396 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273
CVE ID: CVE-2011-2377 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:33.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-21.html - https://bugzilla.mozilla.org/show_bug.cgi?id=639303 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http:
://bugzilla.mozilla.org/show_bug.cgi?id=639303 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13872 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886
ists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html - https://bugzilla.mozilla.org/show_bug.cgi?id=638018
CVE ID: CVE-2011-2378 State: PUBLISHED Published: 2011-08-18T18:00:00 Last Updated: 2024-08-06T23:00:33.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 - http://www.mozilla.org/security/announce/2011/mfsa2011-30.html - https://bugzilla.mozilla.org/show