CVE-2011-2371
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
- Affected products
- Firefox, Red Hat, Seamonkey, Suse, Thunderbird
- Mozilla Seamonkey
- = 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.10, 1.1.11, 1.1.12, 1.1.13, 1.1.14, 1.1.15, 1.1.16, 1.1.17, 1.1.18, 1.1.19, 1.5.0.8, 1.5.0.9, 1.5.0.10, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6
- Fix
- Available
- CVSS 2.0
- 10.0 HIGH
- EPSS
- 75.7% (99th percentile)
- Weakness
- CWE-189
- NVD status
- Modified
- Published
- 2011-06-30
CVE-2011-2371 at NVD
17 known exploits for CVE-2011-2371
Proof-of-concept code and exploit modules indexed by Sploitus
Mozilla Firefox Firefox 4.0.1 Array.reduceRight() Exploit
Mozilla Firefox Firefox 4.0.1 Array.reduceRight() Exploit
Mozilla Firefox 4.0.1 - Array.reduceRight() Remote Overflow
Mozilla Firefox 4.0.1 - 'Array.reduceRight()' Remote Overflow
Mozilla Firefox 4.0.1 Integer Overflow
Mozilla Firefox Array.reduceRight() Integer Overflow
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (Metasploit) (2)
Mozilla Firefox Integer Overflow
Mozilla Firefox Array.reduceRight() Integer Overflow
Mozilla Firefox Array.reduceRight() Integer Overflow Exploit
Mozilla Firefox Array.reduceRight() Integer Overflow
Mozilla Firefox - Array.reduceRight() Integer Overflow (1)
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (1)
Mozilla Firefox Array.reduceRight() Integer Overflow Exploit
Immunity Canvas: FIREFOX_ARRAY_REDUCERIGHT
Mozilla Firefox/Thunderbird/SeaMonkey Array.reduceRight()远程代码执行漏洞
Mozilla Firefox Array.reduceRight() Integer Overflow