CVE-2011-0065
HIGH 10.0EPSS 73.8%
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 73.83% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2011-05-07
- Updated
- 2024-08-06
Metasploit modules (2)
- rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/mozilla_mchannel.rb
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_mchannel…
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/18377
- https://www.exploit-db.com/exploits/17672
- https://www.exploit-db.com/exploits/17650
- https://www.exploit-db.com/exploits/17612
Security advisories
- http://www.mozilla.org/security/announce/2011/mfsa2011-13.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079