Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
                
            Metrics
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
        
        AV:N/AC:M/Au:N/C:C/I:C/A:C
    
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
| Vendors | Products | 
|---|---|
| Mozilla | 
 | 
Configuration 1 [-]
| 
 | 
Configuration 2 [-]
| 
 | 
Configuration 3 [-]
| 
 | 
No data.
References
        History
                    No history.
 MITRE
                        MITRE
                    Status: PUBLISHED
Assigner: mitre
Published: 2011-09-29T00:00:00
Updated: 2024-08-06T23:22:27.157Z
Reserved: 2011-08-01T00:00:00
Link: CVE-2011-3005
 Vulnrichment
                        Vulnrichment
                    No data.
 NVD
                        NVD
                    Status : Deferred
Published: 2011-09-29T00:55:01.577
Modified: 2025-04-11T00:51:21.963
Link: CVE-2011-3005
 Redhat
                        Redhat
                    No data.
 ReportizFlow
ReportizFlow