CVE-2011-0073

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

70.21% chance of exploitation in the next 30 days, 99th percentile

Published

2011-05-07

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nstreera…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/17520
• https://www.exploit-db.com/exploits/17419

References

• CVE Record
• NVD entry

Related

• CVE-2011-0071
• CVE-2011-0096
• CVE-2011-0070
• CVE-2011-0104
• CVE-2011-0065
• CVE-2011-0105