Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceCVE-2011-2378

CVE-2011-2378

UNKNOWN

The appendChild function in Mozilla Firefox before 3

Published Aug 18, 2011

Modified 1 years ago

Details

The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer."

References

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html

http://www.debian.org/security/2011/dsa-2295

http://www.debian.org/security/2011/dsa-2296

http://www.debian.org/security/2011/dsa-2297

http://www.mandriva.com/security/advisories?name=MDVSA-2011:127

http://www.mozilla.org/security/announce/2011/mfsa2011-30.html

http://www.redhat.com/support/errata/RHSA-2011-1164.html

http://www.redhat.com/support/errata/RHSA-2011-1166.html

https://bugzilla.mozilla.org/show_bug.cgi?id=648065

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14163

https://www.cve.org/CVERecord?id=CVE-2011-2378

CVSS Analysis

CVSS v2.0

10.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

10/AV:N/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedAug 18, 2011

ModifiedAug 6, 2024

CVE-2011-2378 | Mondoo Vulnerability Intelligence