FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-2992

This CVE name corresponds to:

Entered Topic
2011-08-16 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2011-2992
Phase Assigned(20110801)

Description

The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=672789
CONFIRM http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
CONFIRM http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
SUSE SUSE-SA:2011:037
OVAL oval:org.mitre.oval:def:14209
SECUNIA 49055