CVE-2011-0056
Fixed in a distro release EPSS 5%
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue.
Products: mozilla firefox, mozilla seamonkey
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | iceape | 2.0.11-3 |
| Debian 6.0 | icedove | 3.0.11-1+squeeze1 |
| Debian 6.0 | iceweasel | 3.5.16-5 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.6.14-4.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.6.14-4.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.6.14-4.el5_6 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.6.14-4.el5_6 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.2.14-4.el5_6 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.2.14-4.el5_6 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.2.14-4.el5_6 |
| Red Hat Enterprise Linux 6 | firefox | 0:3.6.14-4.el6_0 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:3.6.14-4.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:1.9.2.14-3.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:1.9.2.14-3.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:1.9.2.14-3.el6_0 |