CVE-2011-2364

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 92.63%
Affected Products (NVD)
VendorProductVersion
mozillathunderbird
𝑥
≤ 3.1.10
mozillathunderbird_esr
𝑥
≤ 3.1.10
mozillathunderbird
0.1
mozillathunderbird_esr
0.1
mozillathunderbird
0.2
mozillathunderbird_esr
0.2
mozillathunderbird
0.3
mozillathunderbird_esr
0.3
mozillathunderbird
0.4
mozillathunderbird_esr
0.4
mozillathunderbird
0.5
mozillathunderbird_esr
0.5
mozillathunderbird
0.6
mozillathunderbird_esr
0.6
mozillathunderbird
0.7
mozillathunderbird_esr
0.7
mozillathunderbird
0.7.1
mozillathunderbird_esr
0.7.1
mozillathunderbird
0.7.2
mozillathunderbird_esr
0.7.2
mozillathunderbird
0.7.3
mozillathunderbird_esr
0.7.3
mozillathunderbird
0.8
mozillathunderbird_esr
0.8
mozillathunderbird
0.9
mozillathunderbird_esr
0.9
mozillathunderbird
1.0
mozillathunderbird_esr
1.0
mozillathunderbird
1.0.1
mozillathunderbird_esr
1.0.1
mozillathunderbird
1.0.2
mozillathunderbird_esr
1.0.2
mozillathunderbird
1.0.3
mozillathunderbird_esr
1.0.3
mozillathunderbird
1.0.4
mozillathunderbird_esr
1.0.4
mozillathunderbird
1.0.5
mozillathunderbird_esr
1.0.5
mozillathunderbird
1.0.6
mozillathunderbird_esr
1.0.6
mozillathunderbird
1.0.7
mozillathunderbird_esr
1.0.7
mozillathunderbird
1.0.8
mozillathunderbird_esr
1.0.8
mozillathunderbird
1.5
mozillathunderbird_esr
1.5
mozillathunderbird
1.5:beta2
mozillathunderbird_esr
1.5:beta2
mozillathunderbird
1.5.0.1
mozillathunderbird_esr
1.5.0.1
mozillathunderbird
1.5.0.2
mozillathunderbird_esr
1.5.0.2
mozillathunderbird
1.5.0.3
mozillathunderbird_esr
1.5.0.3
mozillathunderbird
1.5.0.4
mozillathunderbird_esr
1.5.0.4
mozillathunderbird
1.5.0.5
mozillathunderbird_esr
1.5.0.5
mozillathunderbird
1.5.0.6
mozillathunderbird_esr
1.5.0.6
mozillathunderbird
1.5.0.7
mozillathunderbird_esr
1.5.0.7
mozillathunderbird
1.5.0.8
mozillathunderbird_esr
1.5.0.8
mozillathunderbird
1.5.0.9
mozillathunderbird_esr
1.5.0.9
mozillathunderbird
1.5.0.10
mozillathunderbird_esr
1.5.0.10
mozillathunderbird
1.5.0.11
mozillathunderbird_esr
1.5.0.11
mozillathunderbird
1.5.0.12
mozillathunderbird_esr
1.5.0.12
mozillathunderbird
1.5.0.13
mozillathunderbird_esr
1.5.0.13
mozillathunderbird
1.5.0.14
mozillathunderbird_esr
1.5.0.14
mozillathunderbird
1.5.1
mozillathunderbird_esr
1.5.1
mozillathunderbird
1.5.2
mozillathunderbird_esr
1.5.2
mozillathunderbird
1.7.1
mozillathunderbird_esr
1.7.1
mozillathunderbird
1.7.3
mozillathunderbird_esr
1.7.3
mozillathunderbird
2.0
mozillathunderbird_esr
2.0
mozillathunderbird
2.0.0.0
mozillathunderbird_esr
2.0.0.0
mozillathunderbird
2.0.0.1
mozillathunderbird_esr
2.0.0.1
mozillathunderbird
2.0.0.2
mozillathunderbird_esr
2.0.0.2
mozillathunderbird
2.0.0.3
mozillathunderbird_esr
2.0.0.3
mozillathunderbird
2.0.0.4
mozillathunderbird_esr
2.0.0.4
mozillathunderbird
2.0.0.5
mozillathunderbird_esr
2.0.0.5
mozillathunderbird
2.0.0.6
mozillathunderbird_esr
2.0.0.6
mozillathunderbird
2.0.0.7
mozillathunderbird_esr
2.0.0.7
mozillathunderbird
2.0.0.8
mozillathunderbird_esr
2.0.0.8
mozillathunderbird
2.0.0.9
mozillathunderbird_esr
2.0.0.9
mozillathunderbird
2.0.0.12
mozillathunderbird_esr
2.0.0.12
mozillathunderbird
2.0.0.14
mozillathunderbird_esr
2.0.0.14
mozillathunderbird
2.0.0.16
mozillathunderbird_esr
2.0.0.16
mozillathunderbird
2.0.0.17
mozillathunderbird_esr
2.0.0.17
mozillathunderbird
2.0.0.18
mozillathunderbird_esr
2.0.0.18
mozillathunderbird
2.0.0.19
mozillathunderbird_esr
2.0.0.19
mozillathunderbird
2.0.0.21
mozillathunderbird_esr
2.0.0.21
mozillathunderbird
2.0.0.22
mozillathunderbird_esr
2.0.0.22
mozillathunderbird
2.0.0.23
mozillathunderbird_esr
2.0.0.23
mozillathunderbird
3.0
mozillathunderbird_esr
3.0
mozillathunderbird
3.0.1
mozillathunderbird_esr
3.0.1
mozillathunderbird
3.0.2
mozillathunderbird_esr
3.0.2
mozillathunderbird
3.0.3
mozillathunderbird_esr
3.0.3
mozillathunderbird
3.0.4
mozillathunderbird_esr
3.0.4
mozillathunderbird
3.0.5
mozillathunderbird_esr
3.0.5
mozillathunderbird
3.0.6
mozillathunderbird_esr
3.0.6
mozillathunderbird
3.0.7
mozillathunderbird_esr
3.0.7
mozillathunderbird
3.0.8
mozillathunderbird_esr
3.0.8
mozillathunderbird
3.0.9
mozillathunderbird_esr
3.0.9
mozillathunderbird
3.0.10
mozillathunderbird_esr
3.0.10
mozillathunderbird
3.0.11
mozillathunderbird_esr
3.0.11
mozillathunderbird
3.1
mozillathunderbird_esr
3.1
mozillathunderbird
3.1.1
mozillathunderbird_esr
3.1.1
mozillathunderbird
3.1.2
mozillathunderbird_esr
3.1.2
mozillathunderbird
3.1.3
mozillathunderbird_esr
3.1.3
mozillathunderbird
3.1.4
mozillathunderbird_esr
3.1.4
mozillathunderbird
3.1.5
mozillathunderbird_esr
3.1.5
mozillathunderbird
3.1.6
mozillathunderbird_esr
3.1.6
mozillathunderbird
3.1.7
mozillathunderbird_esr
3.1.7
mozillathunderbird
3.1.8
mozillathunderbird_esr
3.1.8
mozillathunderbird
3.1.9
mozillathunderbird_esr
3.1.9
mozillafirefox
3.6.2
mozillafirefox_esr
3.6.2
mozillafirefox
3.6.3
mozillafirefox_esr
3.6.3
mozillafirefox
3.6.4
mozillafirefox_esr
3.6.4
mozillafirefox
3.6.6
mozillafirefox_esr
3.6.6
mozillafirefox
3.6.7
mozillafirefox_esr
3.6.7
mozillafirefox
3.6.8
mozillafirefox_esr
3.6.8
mozillafirefox
3.6.9
mozillafirefox_esr
3.6.9
mozillafirefox
3.6.10
mozillafirefox_esr
3.6.10
mozillafirefox
3.6.11
mozillafirefox_esr
3.6.11
mozillafirefox
3.6.12
mozillafirefox_esr
3.6.12
mozillafirefox
3.6.13
mozillafirefox_esr
3.6.13
mozillafirefox
3.6.14
mozillafirefox_esr
3.6.14
mozillafirefox
3.6.15
mozillafirefox_esr
3.6.15
mozillafirefox
3.6.16
mozillafirefox_esr
3.6.16
mozillafirefox
3.6.17
mozillafirefox_esr
3.6.17
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 3.6.18+build2+nobinonly-0ubuntu0.10.04.1
released
maverick
Fixed 3.6.18+build2+nobinonly-0ubuntu0.10.10.1
released
natty
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
firefox-3.0
hardy
ignored
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
firefox-3.5
hardy
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
seamonkey
hardy
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
not-affected
precise
dne
quantal
dne
raring
dne
saucy
dne
thunderbird
hardy
ignored
lucid
Fixed 3.1.11+build2+nobinonly-0ubuntu0.10.04.1
released
maverick
Fixed 3.1.11+build2+nobinonly-0ubuntu0.10.10.1
released
natty
Fixed 3.1.11+build2+nobinonly-0ubuntu0.11.04.1
released
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
Fixed 1.9.2.18+build2+nobinonly-0ubuntu0.10.04.1
released
maverick
Fixed 1.9.2.18+build2+nobinonly-0ubuntu0.10.10.1
released
natty
not-affected
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
xulrunner-2.0
hardy
dne
lucid
dne
maverick
dne
natty
not-affected
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaThunderbird
suse enterprise desktop 15
52.8-1.2
fixed
suse enterprise desktop 15 SP1
60.6.1-3.28.1
fixed
suse enterprise sap 15
52.8-1.2
fixed
suse enterprise sap 15 SP1
60.6.1-3.28.1
fixed
suse enterprise server 15
52.8-1.2
fixed
suse enterprise server 15 SP1
60.6.1-3.28.1
fixed
suse enterprise workstation 15
52.8-1.2
fixed
suse enterprise workstation 15 SP1
60.6.1-3.28.1
fixed
MozillaThunderbird-devel
suse enterprise desktop 15
52.8-1.2
fixed
suse enterprise sap 15
52.8-1.2
fixed
suse enterprise server 15
52.8-1.2
fixed
suse enterprise workstation 15
52.8-1.2
fixed
MozillaThunderbird-translations-common
suse enterprise desktop 15
52.8-1.2
fixed
suse enterprise desktop 15 SP1
60.6.1-3.28.1
fixed
suse enterprise sap 15
52.8-1.2
fixed
suse enterprise sap 15 SP1
60.6.1-3.28.1
fixed
suse enterprise server 15
52.8-1.2
fixed
suse enterprise server 15 SP1
60.6.1-3.28.1
fixed
suse enterprise workstation 15
52.8-1.2
fixed
suse enterprise workstation 15 SP1
60.6.1-3.28.1
fixed
MozillaThunderbird-translations-other
suse enterprise desktop 15
52.8-1.2
fixed
suse enterprise desktop 15 SP1
60.6.1-3.28.1
fixed
suse enterprise sap 15
52.8-1.2
fixed
suse enterprise sap 15 SP1
60.6.1-3.28.1
fixed
suse enterprise server 15
52.8-1.2
fixed
suse enterprise server 15 SP1
60.6.1-3.28.1
fixed
suse enterprise workstation 15
52.8-1.2
fixed
suse enterprise workstation 15 SP1
60.6.1-3.28.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
firefox
RHEL 6
0:3.6.18-1.el6_1
fixed
thunderbird
RHEL 6
0:3.1.11-2.el6_1
fixed
xulrunner
RHEL 6
0:1.9.2.18-2.el6_1
fixed
xulrunner-devel
RHEL 6
0:1.9.2.18-2.el6_1
fixed
References
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
http://secunia.com/advisories/45002
http://support.avaya.com/css/P8/documents/100144854
http://support.avaya.com/css/P8/documents/100145333
http://www.mandriva.com/security/advisories?name=MDVSA-2011:111
http://www.mozilla.org/security/announce/2011/mfsa2011-19.html
http://www.redhat.com/support/errata/RHSA-2011-0885.html
http://www.redhat.com/support/errata/RHSA-2011-0886.html
http://www.redhat.com/support/errata/RHSA-2011-0887.html
http://www.redhat.com/support/errata/RHSA-2011-0888.html
http://www.ubuntu.com/usn/USN-1149-1
https://bugzilla.mozilla.org/show_bug.cgi?id=651990
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13318
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
http://secunia.com/advisories/45002
http://support.avaya.com/css/P8/documents/100144854
http://support.avaya.com/css/P8/documents/100145333
http://www.mandriva.com/security/advisories?name=MDVSA-2011:111
http://www.mozilla.org/security/announce/2011/mfsa2011-19.html
http://www.redhat.com/support/errata/RHSA-2011-0885.html
http://www.redhat.com/support/errata/RHSA-2011-0886.html
http://www.redhat.com/support/errata/RHSA-2011-0887.html
http://www.redhat.com/support/errata/RHSA-2011-0888.html
http://www.ubuntu.com/usn/USN-1149-1
https://bugzilla.mozilla.org/show_bug.cgi?id=651990
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13318