Search for vulnerabilities
Vulnerability details: VCID-m93g-8dbv-dueb
Vulnerability ID VCID-m93g-8dbv-dueb
Aliases CVE-2011-3079
Summary Mozilla Developer Jed Davis and Mozilla security engineer Christoph Diehl reported that Mozilla had inherited a Inter-process Communication (IPC) vulnerability when IPC was introduced into Mozilla products through third-party code. This could allow for privilege escalation through IPC channels due to lack of message validation in the listener process. This issue only affects systems running Windows, leaving Linux and OS X unaffected.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
epss 0.00829 https://api.first.org/data/v1/epss?cve=CVE-2011-3079
cvssv2 6.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2015-57
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2011-3079
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
CVE-2011-3079 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3079
mfsa2015-57 https://www.mozilla.org/en-US/security/advisories/mfsa2015-57
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.73586
EPSS Score 0.00829
Published At Aug. 4, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:52.551577+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-57.md 37.0.0