Fluid Attacks Database

Description

Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	thunderbird	<0:2.0.0.24-18.el5_6	0:2.0.0.24-18.el5_6
rpm rhel5	firefox	<0:3.6.18-1.el5_6	0:3.6.18-1.el5_6
rpm rhel6	firefox	<0:3.6.18-1.el6_1	0:3.6.18-1.el6_1
rpm rhel6	thunderbird	-	-
rpm rhel5	xulrunner	<0:1.9.2.18-2.el5_6	0:1.9.2.18-2.el5_6
rpm rhel6	xulrunner	<0:1.9.2.18-2.el6_1	0:1.9.2.18-2.el6_1

Aliases

1. CVE-2011-23712. NVD-2011-23713. OSV-2011-2371

References

1. https://www.exploit-db.com/exploits/179742. https://www.exploit-db.com/exploits/179763. https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_reduceright.rb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.