VULNERABILITY INTELLIGENCE

CVE-2011-2378

CVSS score10 HIGH
EPSS probability5.61%
CISA KEVNot currently listed
Published2011-08-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references