Check Point Advisories

Mozilla Firefox Thunderbird SeaMonkey nsSVGValue Memory Corruption (CVE-2011-3658)

Check Point Reference:	CPAI-2013-1628
Date Published:	20 Mar 2013
Severity:	High
Last Updated:	Tuesday 01 January, 2013
Source:	CVE-2011-3658
Protection Provided by:
Who is Vulnerable?	Mozilla Firefox 8.0, Mozilla Firefox 7.0, Thunderbird 8.0 and SeaMonkey 2.5
Vulnerability Description	A memory corruption vulnerability exists in Firefox 7.0 and 8.0, Thunderbird 8.0 and SeaMonkey 2.5. The vulnerability is due to unchecked iteration that could cause an out of bounds access to attacker controlled memory. A sucesseful exploitation could lead to malicious code running in the context of the program.