Mozilla Firefox/Thunderbird CVE-2011-3654 SVG '<mpath>' Remote Memory Corruption Vulnerability
BID:50602
Info
Mozilla Firefox/Thunderbird CVE-2011-3654 SVG '<mpath>' Remote Memory Corruption Vulnerability
| Bugtraq ID: | 50602 |
| Class: | Unknown |
| CVE: |
CVE-2011-3654 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2011 12:00AM |
| Updated: | Sep 16 2014 08:29PM |
| Credit: | Aki Helin |
| Vulnerable: |
Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 SuSE openSUSE 11.4 Mozilla Thunderbird 7.0 Mozilla Thunderbird 6 Mozilla Thunderbird 5 Mozilla Firefox 7 Mozilla Firefox 6 Mozilla Firefox 5.0 Mozilla Firefox 4.0 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 |
| Not Vulnerable: |
Mozilla Thunderbird 8.0 Mozilla Firefox 8.0 |
Discussion
Mozilla Firefox/Thunderbird CVE-2011-3654 SVG '' Remote Memory Corruption Vulnerability
Mozilla Firefox and Thunderbird are prone to a memory-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
This issue is fixed in:
Firefox 8.0
Thunderbird 8.0
Mozilla Firefox and Thunderbird are prone to a memory-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
This issue is fixed in:
Firefox 8.0
Thunderbird 8.0
Exploit / POC
Mozilla Firefox/Thunderbird CVE-2011-3654 SVG '' Remote Memory Corruption Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Mozilla Firefox/Thunderbird CVE-2011-3654 SVG '' Remote Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1
-
Mandriva beagle-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva beagle-crawl-system-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva beagle-doc-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva beagle-evolution-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva beagle-gui-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva beagle-gui-qt-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva beagle-libs-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-af-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ar-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-be-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-bg-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-bn-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ca-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-cs-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-cy-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-da-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-de-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-devel-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-el-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-en_GB-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-eo-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-es_AR-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-es_ES-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-et-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-eu-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-beagle-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-blogrovr-1.1.804-13.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-mozvoikko-1.0.1-2.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-r-kiosk-0.8.1-2.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-scribefire-3.5.2-2.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-weave-sync-1.1-5.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ext-xmarks-3.6.14-2.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-fi-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-fr-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-fy-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ga_IE-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-gl-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-gu_IN-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-he-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-hi-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-hu-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-id-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-is-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-it-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ja-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ka-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-kn-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ko-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ku-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-lt-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-lv-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-mk-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-mr-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-nb_NO-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-nl-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-nn_NO-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-oc-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-pa_IN-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-pl-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-pt_BR-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-pt_PT-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ro-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-ru-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-si-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-sk-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-sl-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-sq-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-sr-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-sv_SE-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-te-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-th-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-tr-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-uk-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-zh_CN-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva firefox-zh_TW-3.6.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gjs-0.6-4.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-extras-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-gda-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-gda-devel-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-gdl-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-gtkhtml2-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-gtkmozembed-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva gnome-python-gtkspell-2.25.3-18.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libgjs-devel-0.6-4.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libgjs0-0.6-4.17mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libnss-devel-3.13.1-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libnss-static-devel-3.13.1-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libnss3-3.13.1-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libxulrunner-devel-1.9.2.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libxulrunner1.9.2.24-1.9.2.24-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-3.1.16-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-af-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-ar-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-be-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-beagle-0.3.9-40.21mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-bg-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-bn_BD-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-ca-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-cs-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-da-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-de-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-el-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-en_GB-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-3.1.16-0.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-ar-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-ca-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-cs-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-de-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-el-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-es-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-fi-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-fr-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-hu-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-it-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-ja-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-ko-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-nb-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-nl-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-pl-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mozilla-thunderbird-enigmail-pt-3.1.16-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/
References
Mozilla Firefox/Thunderbird CVE-2011-3654 SVG '' Remote Memory Corruption Vulnerability
References:
References:
- Mozilla Firefox Homepage (Mozilla)
- Thunderbird Homepage (Mozilla)
- Mozilla Foundation Security Advisory 2011-48 (Mozilla)