Search for vulnerabilities
| Vulnerability ID | VCID-f83x-q3ne-aaaj |
| Aliases |
CVE-2011-0073
|
| Summary | CVE-2011-0073 Mozilla dangling pointer flaw (MFSA 2011-13) |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 9.0 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| CWE-20 | Improper Input Validation |
| Data source | Exploit-DB |
|---|---|
| Date added | July 11, 2011 |
| Description | Mozilla Firefox - 'nsTreeRange' Dangling Pointer (Metasploit) (1) |
| Ransomware campaign use | Known |
| Source publication date | July 10, 2011 |
| Exploit type | remote |
| Platform | windows |
| Source update date | July 11, 2011 |
| Source URL | http://www.zerodayinitiative.com/advisories/ZDI-11-157/ |
| Data source | Metasploit |
|---|---|
| Description | This module exploits a code execution vulnerability in Mozilla Firefox 3.6.x <= 3.6.16 and 3.5.x <= 3.5.17 found in nsTreeSelection. By overwriting a subfunction of invalidateSelection it is possible to free the nsTreeRange object that the function currently operates on. Any further operations on the freed object can result in remote code execution. Utilizing the call setup the function provides it's possible to bypass DEP without the need for a ROP. Sadly this exploit is still either dependent on Java or bound by ASLR because Firefox doesn't employ any ASLR-free modules anymore. |
| Note | {}
|
| Ransomware campaign use | Unknown |
| Source publication date | Feb. 2, 2011 |
| Platform | Windows |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/browser/mozilla_nstreerange.rb |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.99114 |
| EPSS Score | 0.81161 |
| Published At | March 28, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| There are no relevant records. | ||||