CyberSec.Space Logo
Back to CVE Browser

CVE-2011-2998

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1650%
EPSS Percentile31.14th
PublishedSep 30, 2011
Last ModifiedApr 29, 2026

Vulnerability Description

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Affected Platforms (CPE)

πŸ“¦
Mozilla

Firefox

= 3.6
πŸ“¦
Mozilla

Firefox

= 3.6.2
πŸ“¦
Mozilla

Firefox

= 3.6.3
πŸ“¦
Mozilla

Firefox

= 3.6.4
πŸ“¦
Mozilla

Firefox

= 3.6.6
πŸ“¦
Mozilla

Firefox

= 3.6.7
πŸ“¦
Mozilla

Firefox

= 3.6.8
πŸ“¦
Mozilla

Firefox

= 3.6.9
πŸ“¦
Mozilla

Firefox

= 3.6.10
πŸ“¦
Mozilla

Firefox

= 3.6.11
πŸ“¦
Mozilla

Firefox

= 3.6.12
πŸ“¦
Mozilla

Firefox

= 3.6.13
πŸ“¦
Mozilla

Firefox

= 3.6.14
πŸ“¦
Mozilla

Firefox

= 3.6.15
πŸ“¦
Mozilla

Firefox

= 3.6.16
πŸ“¦
Mozilla

Firefox

= 3.6.17
πŸ“¦
Mozilla

Firefox

= 3.6.18
πŸ“¦
Mozilla

Firefox

= 3.6.19
πŸ“¦
Mozilla

Firefox

= 3.6.20
πŸ“¦
Mozilla

Firefox

= 3.6.21
πŸ“¦
Mozilla

Firefox

= 3.6.22

References & Advisories

Related Vulnerabilities