Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Information
Published : 2011-06-30 09:55
Updated : 2017-09-18 18:32
NVD link : CVE-2011-2363
Mitre link : CVE-2011-2363
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
mozilla
- firefox
- seamonkey
- thunderbird