← Back

CVE-2011-3232

nvd nist
Published: Sep 29, 2011Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.

Affected (207)

Mozilla
3 products
Firefox
Thunderbird
Seamonkey
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Up to 3.6.22
Firefox
Version 3.6.10
Firefox
Version 3.6.11
Firefox
Version 3.6.12
Firefox
Version 3.6.13
Firefox
Version 3.6.14
Firefox
Version 3.6.15
Firefox
Version 3.6.16
Firefox
Version 3.6.17
Firefox
Version 3.6.18
Firefox
Version 3.6.19
Firefox
Version 3.6.20
Firefox
Version 3.6.21
Firefox
Version 3.6.2
Firefox
Version 3.6.3
Firefox
Version 3.6.4
Firefox
Version 3.6.6
Firefox
Version 3.6.7
Firefox
Version 3.6.8
Firefox
Version 3.6.9
Firefox
Version 3.6
Configuration B
16 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Up to 6.0
Firefox
Version 4.0.1
Firefox
Version 4.0
Firefox
Version 4.0 beta10
Firefox
Version 4.0 beta11
Firefox
Version 4.0 beta12
Firefox
Version 4.0 beta1
Firefox
Version 4.0 beta2
Firefox
Version 4.0 beta3
Firefox
Version 4.0 beta4
Firefox
Version 4.0 beta5
Firefox
Version 4.0 beta6
Firefox
Version 4.0 beta7
Firefox
Version 4.0 beta8
Firefox
Version 4.0 beta9
Firefox
Version 5.0
Configuration C
100 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Thunderbird
Up to 6.0.2
Thunderbird
Version 0.1
Thunderbird
Version 0.2
Thunderbird
Version 0.3
Thunderbird
Version 0.4
Thunderbird
Version 0.5
Thunderbird
Version 0.6
Thunderbird
Version 0.7.1
Thunderbird
Version 0.7.2
Thunderbird
Version 0.7.3
Thunderbird
Version 0.7
Thunderbird
Version 0.8
Thunderbird
Version 0.9
Thunderbird
Version 1.0.1
Thunderbird
Version 1.0.2
Thunderbird
Version 1.0.3
Thunderbird
Version 1.0.4
Thunderbird
Version 1.0.5
Thunderbird
Version 1.0.5 beta
Thunderbird
Version 1.0.6
Thunderbird
Version 1.0.7
Thunderbird
Version 1.0.8
Thunderbird
Version 1.0
Thunderbird
Version 1.5.0.10
Thunderbird
Version 1.5.0.11
Thunderbird
Version 1.5.0.12
Thunderbird
Version 1.5.0.13
Thunderbird
Version 1.5.0.14
Thunderbird
Version 1.5.0.1
Thunderbird
Version 1.5.0.2
Thunderbird
Version 1.5.0.3
Thunderbird
Version 1.5.0.4
Thunderbird
Version 1.5.0.5
Thunderbird
Version 1.5.0.6
Thunderbird
Version 1.5.0.7
Thunderbird
Version 1.5.0.8
Thunderbird
Version 1.5.0.9
Thunderbird
Version 1.5.1
Thunderbird
Version 1.5.2
Thunderbird
Version 1.5
Thunderbird
Version 1.5 beta2
Thunderbird
Version 1.7.1
Thunderbird
Version 1.7.3
Thunderbird
Version 2.0.0.0
Thunderbird
Version 2.0.0.11
Thunderbird
Version 2.0.0.12
Thunderbird
Version 2.0.0.13
Thunderbird
Version 2.0.0.14
Thunderbird
Version 2.0.0.15
Thunderbird
Version 2.0.0.16
Thunderbird
Version 2.0.0.17
Thunderbird
Version 2.0.0.18
Thunderbird
Version 2.0.0.19
Thunderbird
Version 2.0.0.1
Thunderbird
Version 2.0.0.20
Thunderbird
Version 2.0.0.21
Thunderbird
Version 2.0.0.22
Thunderbird
Version 2.0.0.23
Thunderbird
Version 2.0.0.2
Thunderbird
Version 2.0.0.3
Thunderbird
Version 2.0.0.4
Thunderbird
Version 2.0.0.5
Thunderbird
Version 2.0.0.6
Thunderbird
Version 2.0.0.7
Thunderbird
Version 2.0.0.8
Thunderbird
Version 2.0.0.9
Thunderbird
Version 2.0
Thunderbird
Version 2.0_.12
Thunderbird
Version 2.0_.13
Thunderbird
Version 2.0_.14
Thunderbird
Version 2.0_.4
Thunderbird
Version 2.0_.5
Thunderbird
Version 2.0_.6
Thunderbird
Version 2.0_.9
Thunderbird
Version 2.0_8
Thunderbird
Version 3.0.10
Thunderbird
Version 3.0.11
Thunderbird
Version 3.0.1
Thunderbird
Version 3.0.2
Thunderbird
Version 3.0.3
Thunderbird
Version 3.0.4
Thunderbird
Version 3.0.5
Thunderbird
Version 3.0.6
Thunderbird
Version 3.0.7
Thunderbird
Version 3.0.8
Thunderbird
Version 3.0.9
Thunderbird
Version 3.0
Thunderbird
Version 3.1.10
Thunderbird
Version 3.1.11
Thunderbird
Version 3.1.1
Thunderbird
Version 3.1.2
Thunderbird
Version 3.1.3
Thunderbird
Version 3.1.4
Thunderbird
Version 3.1.5
Thunderbird
Version 3.1.6
Thunderbird
Version 3.1.7
Thunderbird
Version 3.1.8
Thunderbird
Version 3.1.9
Thunderbird
Version 3.1
Thunderbird
Version 5.0
Configuration D
70 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Seamonkey
Up to 2.3.3
Seamonkey
Version 1.0.1
Seamonkey
Version 1.0.2
Seamonkey
Version 1.0.3
Seamonkey
Version 1.0.4
Seamonkey
Version 1.0.5
Seamonkey
Version 1.0.6
Seamonkey
Version 1.0.7
Seamonkey
Version 1.0.8
Seamonkey
Version 1.0.99
Seamonkey
Version 1.0.9
Seamonkey
Version 1.0
Seamonkey
Version 1.0
Seamonkey
Version 1.0
Seamonkey
Version 1.0
Seamonkey
Version 1.0 alpha
Seamonkey
Version 1.0 beta
Seamonkey
Version 1.1.10
Seamonkey
Version 1.1.11
Seamonkey
Version 1.1.12
Seamonkey
Version 1.1.13
Seamonkey
Version 1.1.14
Seamonkey
Version 1.1.15
Seamonkey
Version 1.1.16
Seamonkey
Version 1.1.17
Seamonkey
Version 1.1.18
Seamonkey
Version 1.1.19
Seamonkey
Version 1.1.1
Seamonkey
Version 1.1.2
Seamonkey
Version 1.1.3
Seamonkey
Version 1.1.4
Seamonkey
Version 1.1.5
Seamonkey
Version 1.1.5 1.1.10
Seamonkey
Version 1.1.6
Seamonkey
Version 1.1.7
Seamonkey
Version 1.1.8
Seamonkey
Version 1.1.9
Seamonkey
Version 1.1
Seamonkey
Version 1.1 alpha
Seamonkey
Version 1.1 beta
Seamonkey
Version 1.5.0.10
Seamonkey
Version 1.5.0.8
Seamonkey
Version 1.5.0.9
Seamonkey
Version 2.0.10
Seamonkey
Version 2.0.11
Seamonkey
Version 2.0.12
Seamonkey
Version 2.0.13
Seamonkey
Version 2.0.14
Seamonkey
Version 2.0.1
Seamonkey
Version 2.0.2
Seamonkey
Version 2.0.3
Seamonkey
Version 2.0.4
Seamonkey
Version 2.0.5
Seamonkey
Version 2.0.6
Seamonkey
Version 2.0.7
Seamonkey
Version 2.0.8
Seamonkey
Version 2.0.9
Seamonkey
Version 2.0
Seamonkey
Version 2.0 alpha_1
Seamonkey
Version 2.0 alpha_2
Seamonkey
Version 2.0 alpha_3
Seamonkey
Version 2.0 beta_1
Seamonkey
Version 2.0 beta_2
Seamonkey
Version 2.0 rc1
Seamonkey
Version 2.0 rc2
Seamonkey
Version 2.0a1
Seamonkey
Version 2.0a1pre
Seamonkey
Version 2.1 alpha1
Seamonkey
Version 2.1 alpha2
Seamonkey
Version 2.1 alpha3

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (34)

Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.