ID CVE-2011-0079
Summary Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 19-09-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
oval via4
accepted 2014-10-06T04:01:21.974-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization DTCC
  • name Sergey Artykhov
    organization ALTX-SOFT
  • name Sergey Artykhov
    organization ALTX-SOFT
  • name Evgeniy Pavlov
    organization ALTX-SOFT
  • name Evgeniy Pavlov
    organization ALTX-SOFT
  • name Evgeniy Pavlov
    organization ALTX-SOFT
definition_extensions
comment Mozilla Firefox Mainline release is installed
oval oval:org.mitre.oval:def:22259
description Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors.
family windows
id oval:org.mitre.oval:def:14232
status accepted
submitted 2011-11-25T18:08:00.000-05:00
title Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors.
version 26
refmap via4
confirm
Last major update 19-09-2017 - 01:31
Published 07-05-2011 - 18:55
Last modified 19-09-2017 - 01:31
Back to Top