CVE-2011-3654

Published Nov 9, 2011 CVSS 2.0 · 10.0 Critical EPSS 4.4% KEV · Not listed
Description
The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-1277-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-1282-1 Thunderbird vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 11:46 PM
Reserved
Sep 23, 2011, 12:00 AM
Status
Modified
Published
Nov 9, 2011, 11:55 AM
Modified
Jun 16, 2026, 11:33 PM