← Back

CVE-2011-3671

nvd nist
Published: Jun 18, 2012Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.

Affected (100)

Mozilla
3 products
Firefox
Seamonkey
Thunderbird
Configuration A
100 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 4.0.1
Firefox
Version 4.0
Firefox
Version 4.0 beta10
Firefox
Version 4.0 beta11
Firefox
Version 4.0 beta12
Firefox
Version 4.0 beta1
Firefox
Version 4.0 beta2
Firefox
Version 4.0 beta3
Firefox
Version 4.0 beta4
Firefox
Version 4.0 beta5
Firefox
Version 4.0 beta6
Firefox
Version 4.0 beta7
Firefox
Version 4.0 beta8
Firefox
Version 4.0 beta9
Firefox
Version 5.0.1
Firefox
Version 5.0
Firefox
Version 6.0.1
Firefox
Version 6.0.2
Firefox
Version 6.0
Firefox
Version 7.0.1
Firefox
Version 7.0
Firefox
Version 8.0
Mozilla
Seamonkey
Up to 2.5
Seamonkey
Version 1.0.1
Seamonkey
Version 1.0.2
Seamonkey
Version 1.0.3
Seamonkey
Version 1.0.4
Seamonkey
Version 1.0.5
Seamonkey
Version 1.0.6
Seamonkey
Version 1.0.7
Seamonkey
Version 1.0.8
Seamonkey
Version 1.0.99
Seamonkey
Version 1.0.9
Seamonkey
Version 1.0
Seamonkey
Version 1.0
Seamonkey
Version 1.0
Seamonkey
Version 1.0
Seamonkey
Version 1.0 alpha
Seamonkey
Version 1.0 beta
Seamonkey
Version 1.1.10
Seamonkey
Version 1.1.11
Seamonkey
Version 1.1.12
Seamonkey
Version 1.1.13
Seamonkey
Version 1.1.14
Seamonkey
Version 1.1.15
Seamonkey
Version 1.1.16
Seamonkey
Version 1.1.17
Seamonkey
Version 1.1.18
Seamonkey
Version 1.1.19
Seamonkey
Version 1.1.1
Seamonkey
Version 1.1.2
Seamonkey
Version 1.1.3
Seamonkey
Version 1.1.4
Seamonkey
Version 1.1.5
Seamonkey
Version 1.1.5 1.1.10
Seamonkey
Version 1.1.6
Seamonkey
Version 1.1.7
Seamonkey
Version 1.1.8
Seamonkey
Version 1.1.9
Seamonkey
Version 1.1
Seamonkey
Version 1.1 alpha
Seamonkey
Version 1.1 beta
Seamonkey
Version 1.5.0.10
Seamonkey
Version 1.5.0.8
Seamonkey
Version 1.5.0.9
Seamonkey
Version 2.0.10
Seamonkey
Version 2.0.11
Seamonkey
Version 2.0.12
Seamonkey
Version 2.0.13
Seamonkey
Version 2.0.14
Seamonkey
Version 2.0.1
Seamonkey
Version 2.0.2
Seamonkey
Version 2.0.3
Seamonkey
Version 2.0.4
Seamonkey
Version 2.0.5
Seamonkey
Version 2.0.6
Seamonkey
Version 2.0.7
Seamonkey
Version 2.0.8
Seamonkey
Version 2.0.9
Seamonkey
Version 2.0
Seamonkey
Version 2.0 alpha_1
Seamonkey
Version 2.0 alpha_2
Seamonkey
Version 2.0 alpha_3
Seamonkey
Version 2.0 beta_1
Seamonkey
Version 2.0 beta_2
Seamonkey
Version 2.0 rc1
Seamonkey
Version 2.0 rc2
Seamonkey
Version 2.0a1
Seamonkey
Version 2.0a1pre
Seamonkey
Version 2.1 alpha1
Seamonkey
Version 2.1 alpha2
Seamonkey
Version 2.1 alpha3
Seamonkey
Version 2.3.3
Mozilla
Thunderbird
Version 5.0
Thunderbird
Version 6.0.1
Thunderbird
Version 6.0.2
Thunderbird
Version 6.0
Thunderbird
Version 7.0.1
Thunderbird
Version 7.0
Thunderbird
Version 8.0

Related CWEs

CWE-399
CWE-399

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.