VULNERABILITY INTELLIGENCE
CVE-2011-2371
CVSS score10 HIGH
EPSS probability75.69%
CISA KEVNot currently listed
Published2011-06-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.