CVE-2011-2985: mozilla firefox
Vulnerability summary
CVE-2011-2985 is a high (CVSS 10.0) vulnerability in mozilla firefox. EPSS estimates a 5.46% chance of exploitation in the next 30 days, higher than 92.7% of scored vulnerabilities.
Not severe (CVSS 10, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 18-08-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.46%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
Increase +0.15 pp
From 5.31% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Mozilla3 products
- firefox4.0 | 4.0:beta1 | 4.0:beta10 | 4.0:beta11 | 4.0:beta12 | 4.0:beta2 | 4.0:beta3 | 4.0:beta4 | 4.0:beta5 | 4.0:beta6 | 4.0:beta7 | 4.0:beta8 | 4.0:beta9 | 4.0.1 | 5.0
- seamonkey2.0 | 2.0:alpha_1 | 2.0:alpha_2 | 2.0:alpha_3 | 2.0:beta_1 | 2.0:beta_2 | 2.0:rc1 | 2.0:rc2 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9 | 2.0.10 | 2.0.11 | 2.0.12 | 2.0.13 | 2.0.14 | 2.1 | 2.1:alpha1 | 2.1:alpha2 | 2.1:alpha3 | 2.1:beta1 | 2.1:beta2 | 2.1:beta3 | 2.1:rc1 | 2.1:rc2 | 2.2 | 2.2:beta1 | 2.2:beta2 | 2.2:beta3
- thunderbird≤ 5.0 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.7 | 0.7.1 | 0.7.2 | 0.7.3 | 0.8 | 0.9 | 1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7 | 1.5.0.8 | 1.5.0.9 | 1.5.0.10 | 1.5.0.11 | 1.5.0.12 | 1.5.0.13 | 1.5.0.14 | 1.5.1 | 1.5.2 | 1.7.1 | 1.7.3 | 2.0 | 2.0.0.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.7 | 2.0.0.8 | 2.0.0.9 | 2.0.0.12 | 2.0.0.14 | 2.0.0.16 | 2.0.0.17 | 2.0.0.18 | 2.0.0.19 | 2.0.0.21 | 2.0.0.22 | 2.0.0.23 | 3.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.1 | 3.1.1 | 31.2 | 31.3 | 3.1.4 | 3.1.5 | 3.1.6 | 3.1.7
1 vendor · 3 products
References
20 links- www.mozilla.org/security/announce/2011/mfsa2011-31.htmlX Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=650273X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=650732X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=665518X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=667315X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=651030X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=646825X Refsource CONFIRM
- www.mozilla.org/security/announce/2011/mfsa2011-33.htmlX Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=662132X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14440VDB EntrySignatureX Refsource OVAL
Show all 20 references
- bugzilla.mozilla.org/show_bug.cgi?id=667092X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=668245X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=648206X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=650275X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=667512X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=669584X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=660517X Refsource CONFIRM