CVE-2011-2992

The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Affected products

Firefox, Seamonkey, Suse, Thunderbird

Mozilla Firefox

= 4.0, 4.0.1, 5.0

Fix

Available

CVSS 2.0

10.0 HIGH

EPSS

3.6% (89th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2011-08-18