NVD

Id
10243  
Name
CVE-2011-3658  
Description
The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-20  
Modified Date
2013-02-14  
Seq
2011-3658  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
58625 10243 CVE-2011-3658 openSUSE-SU-2012:0007  View
58626 10243 CVE-2011-3658 openSUSE-SU-2012:0039  View
58627 10243 CVE-2011-3658 openSUSE-SU-2012:0417  View
58628 10243 CVE-2011-3658 oval:org.mitre.oval:def:14664  View
58629 10243 CVE-2011-3658 MDVSA-2011:192  View
58630 10243 CVE-2011-3658 http://www.mozilla.org/security/announce/2011/mfsa2011-55.html  View
58631 10243 CVE-2011-3658 1026445  View
58632 10243 CVE-2011-3658 1026446  View
58633 10243 CVE-2011-3658 1026447  View
58634 10243 CVE-2011-3658 USN-1401-1  View
58635 10243 CVE-2011-3658 firefox-domattrmodified-code-exec(71910)  View
58636 10243 CVE-2011-3658 https://bugzilla.mozilla.org/show_bug.cgi?id=708186  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33257 JVNDB-2011-003497 複数の Mozilla 製品の SVG 実装におけるサービス運用妨害 (DoS) の脆弱性 複数の Mozilla 製品の SVG 実装は、DOMAttrModified イベントハンドラを適切に処理しないため、サービス運用妨害 (領域外メモリアクセス) 状態となる、または詳細不明な影響を受ける脆弱性が存在します。 CVE-2011-3658 51565 CVE-2011-3658 10243 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003497.html 2011-12-20 2011-12-22 View