What is CVE-2011-3654?

CVE-2011-3654 is a vulnerability in Mozilla Firefox, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2011-11-09.

Is CVE-2011-3654 known to be exploited?

9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Mozilla Firefox

CVE-2011-3654

The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.044 (90.3th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox — versions 0.1, 0.2, 0.3
Mozilla Thunderbird — versions 0.1, 0.2, 0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2011-3654?: CVE-2011-3654 is a vulnerability in Mozilla Firefox, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2011-11-09.
Is CVE-2011-3654 known to be exploited?: 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.