What’s Vulnerable › Vulnerabilities

CVE-2011-2985

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-08-18 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected products

• Mozilla Firefox: 4.0, 4.0-beta1, 4.0-beta10, 4.0-beta11, 4.0-beta12, 4.0-beta2 (+9)
• Mozilla Seamonkey: 2.0, 2.0-alpha_1, 2.0-alpha_2, 2.0-alpha_3, 2.0-beta_1, 2.0-beta_2 (+29)
• Mozilla Thunderbird: through 5.0; 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+75)

References

• http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html
• http://secunia.com/advisories/49055
• http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
• http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
• http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=646825
• https://bugzilla.mozilla.org/show_bug.cgi?id=648206
• https://bugzilla.mozilla.org/show_bug.cgi?id=650273
• https://bugzilla.mozilla.org/show_bug.cgi?id=650275
• https://bugzilla.mozilla.org/show_bug.cgi?id=650732
• https://bugzilla.mozilla.org/show_bug.cgi?id=651030
• https://bugzilla.mozilla.org/show_bug.cgi?id=660517

Get alerted when CVE-2011-2985 or the next vulnerability affects your stack