NVD

Id
9165  
Name
CVE-2011-2373  
Description
Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-06-30  
Modified Date
2012-01-26  
Seq
2011-2373  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52354 9165 CVE-2011-2373 SUSE-SA:2011:028  View
52355 9165 CVE-2011-2373 oval:org.mitre.oval:def:14178  View
52356 9165 CVE-2011-2373 http://support.avaya.com/css/P8/documents/100144854  View
52357 9165 CVE-2011-2373 http://support.avaya.com/css/P8/documents/100145333  View
52358 9165 CVE-2011-2373 DSA-2268  View
52359 9165 CVE-2011-2373 DSA-2269  View
52360 9165 CVE-2011-2373 DSA-2273  View
52361 9165 CVE-2011-2373 MDVSA-2011:111  View
52362 9165 CVE-2011-2373 http://www.mozilla.org/security/announce/2011/mfsa2011-20.html  View
52363 9165 CVE-2011-2373 RHSA-2011:0885  View
52364 9165 CVE-2011-2373 RHSA-2011:0887  View
52365 9165 CVE-2011-2373 RHSA-2011:0888  View
52366 9165 CVE-2011-2373 USN-1149-1  View
52367 9165 CVE-2011-2373 thunderbird-xul-code-exec(68133)  View
52368 9165 CVE-2011-2373 https://bugzilla.mozilla.org/show_bug.cgi?id=617247  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31611 JVNDB-2011-001851 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、JavaScript が無効なとき、任意のコードを実行される脆弱性が存在します。 CVE-2011-2373 50280 CVE-2011-2373 9165 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001851.html 2011-06-21 2012-01-27 View