Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2011-3003: Firefox and SeaMonkey can crash or be exploited via WebGL

CVE-2011-3003 · published 15 years ago

Summary

Older versions of Mozilla Firefox (before version 7) and SeaMonkey (before version 2.4) can be forced to stop working or possibly run malicious code when a specially crafted WebGL page is viewed. The issue happens because the browser incorrectly handles memory during graphics processing. Updating to the latest versions of these browsers will fix the problem.

What to do

Update mozilla firefox to version 7.0 or later.
Update mozilla seamonkey to version 2.4 or later.

Affected software

Vendor	Product	Affected versions
mozilla	firefox	< 7.0 `cpe:2.3:a:mozilla:firefox::::::::`
mozilla	seamonkey	< 2.4 `cpe:2.3:a:mozilla:seamonkey::::::::`

Original advisory text

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case tha...

References

http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 Third Party Advisory
http://www.mozilla.org/security/announce/2011/mfsa2011-41.html Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=682335 Issue Tracking Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

10.0 Critical

Exploitation

4% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published29 Sep 2011

Updated25 Oct 2026

First seen29 Sep 2026

Sources

CVE-2011-3003 · NVD

Track software like this

Free during beta