NVD

Id
9170  
Name
CVE-2011-2378  
Description
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-18  
Modified Date
2012-05-02  
Seq
2011-2378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52439 9170 CVE-2011-2378 SUSE-SA:2011:037  View
52440 9170 CVE-2011-2378 SUSE-SU-2011:0967  View
52441 9170 CVE-2011-2378 oval:org.mitre.oval:def:14163  View
52442 9170 CVE-2011-2378 DSA-2295  View
52443 9170 CVE-2011-2378 DSA-2296  View
52444 9170 CVE-2011-2378 DSA-2297  View
52445 9170 CVE-2011-2378 MDVSA-2011:127  View
52446 9170 CVE-2011-2378 http://www.mozilla.org/security/announce/2011/mfsa2011-30.html  View
52447 9170 CVE-2011-2378 RHSA-2011:1164  View
52448 9170 CVE-2011-2378 RHSA-2011:1166  View
52449 9170 CVE-2011-2378 https://bugzilla.mozilla.org/show_bug.cgi?id=648065  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31950 JVNDB-2011-002190 複数の Mozilla 製品の appendChild 関数における任意のコードを実行される脆弱性 複数の Mozilla 製品の appendChild 関数は、DOM オブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-2378 50285 CVE-2011-2378 9170 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002190.html 2011-08-16 2011-09-07 View