Strix
26.1K

CVE-2011-3232

UnknownEPSS 5.01%

Last modified

CVE-2011-3232 is a vulnerability of currently unknown severity. YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.. EPSS estimates a 5.01% chance of exploitation in the next 30 days.

Description

YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.

Metrics

EPSS Probability
5.01%

91.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
MozillaFirefox<= 3.6.22—
MozillaFirefox3.6—
MozillaFirefox3.6.2—
MozillaFirefox3.6.3—
MozillaFirefox3.6.4—
MozillaFirefox3.6.6—
MozillaFirefox3.6.7—
MozillaFirefox3.6.8—
MozillaFirefox3.6.9—
MozillaFirefox3.6.10—
MozillaFirefox3.6.11—
MozillaFirefox3.6.12—
MozillaFirefox3.6.13—
MozillaFirefox3.6.14—
MozillaFirefox3.6.15—
MozillaFirefox3.6.16—
MozillaFirefox3.6.17—
MozillaFirefox3.6.18—
MozillaFirefox3.6.19—
MozillaFirefox3.6.20—
MozillaFirefox3.6.21—
MozillaFirefox<= 6.0—
MozillaFirefox4.0—
MozillaFirefox4.0.1—
MozillaFirefox5.0—
MozillaThunderbird<= 6.0.2—
MozillaThunderbird0.1—
MozillaThunderbird0.2—
MozillaThunderbird0.3—
MozillaThunderbird0.4—
MozillaThunderbird0.5—
MozillaThunderbird0.6—
MozillaThunderbird0.7—
MozillaThunderbird0.7.1—
MozillaThunderbird0.7.2—
MozillaThunderbird0.7.3—
MozillaThunderbird0.8—
MozillaThunderbird0.9—
MozillaThunderbird1.0—
MozillaThunderbird1.0.1—
MozillaThunderbird1.0.2—
MozillaThunderbird1.0.3—
MozillaThunderbird1.0.4—
MozillaThunderbird1.0.5—
MozillaThunderbird1.0.6—
MozillaThunderbird1.0.7—
MozillaThunderbird1.0.8—
MozillaThunderbird1.5—
MozillaThunderbird1.5.0.1—
MozillaThunderbird1.5.0.2—

Showing 50 of 176 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2011-3232?
YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
How severe is CVE-2011-3232?
Severity scoring for CVE-2011-3232 is pending analysis. The EPSS model estimates a 5.01% probability of exploitation in the next 30 days.
How do I fix CVE-2011-3232?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-3232?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST