CVE-2011-2998

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 92.54%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
3.6
mozillafirefox_esr
3.6
mozillafirefox
3.6.2
mozillafirefox_esr
3.6.2
mozillafirefox
3.6.3
mozillafirefox_esr
3.6.3
mozillafirefox
3.6.4
mozillafirefox_esr
3.6.4
mozillafirefox
3.6.6
mozillafirefox_esr
3.6.6
mozillafirefox
3.6.7
mozillafirefox_esr
3.6.7
mozillafirefox
3.6.8
mozillafirefox_esr
3.6.8
mozillafirefox
3.6.9
mozillafirefox_esr
3.6.9
mozillafirefox
3.6.10
mozillafirefox_esr
3.6.10
mozillafirefox
3.6.11
mozillafirefox_esr
3.6.11
mozillafirefox
3.6.12
mozillafirefox_esr
3.6.12
mozillafirefox
3.6.13
mozillafirefox_esr
3.6.13
mozillafirefox
3.6.14
mozillafirefox_esr
3.6.14
mozillafirefox
3.6.15
mozillafirefox_esr
3.6.15
mozillafirefox
3.6.16
mozillafirefox_esr
3.6.16
mozillafirefox
3.6.17
mozillafirefox_esr
3.6.17
mozillafirefox
3.6.18
mozillafirefox_esr
3.6.18
mozillafirefox
3.6.19
mozillafirefox_esr
3.6.19
mozillafirefox
3.6.20
mozillafirefox_esr
3.6.20
mozillafirefox
3.6.21
mozillafirefox_esr
3.6.21
mozillafirefox
3.6.22
mozillafirefox_esr
3.6.22
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 3.6.23+build1+nobinonly-0ubuntu0.10.04.1
released
maverick
Fixed 3.6.23+build1+nobinonly-0ubuntu0.10.04.1
released
natty
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
ignored
maverick
ignored
natty
ignored
xulrunner-2.0
hardy
dne
lucid
dne
maverick
dne
natty
ignored
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
firefox
RHEL 6
0:3.6.23-2.el6_1
fixed
thunderbird
RHEL 6
0:3.1.15-1.el6_1
fixed
xulrunner
RHEL 6
0:1.9.2.23-1.el6_1.1
fixed
xulrunner-devel
RHEL 6
0:1.9.2.23-1.el6_1.1
fixed
Common Weakness Enumeration