CVE-2011-0065 in the critical feed json
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers…
published 2011-05-07 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-0091
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 74.4%
- EPSS 74.4% chance of exploitation in 30 days, percentile 99.4%
- public exploits
- 6
- Metasploit, Exploit-DB
Summary
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
Patch / fix
- firefox RHEL 4 3.6.17-2.el4
- firefox RHEL 5 3.6.17-1.el5_6
- firefox RHEL 6 3.6.17-1.el6_0
- xulrunner RHEL 5 1.9.2.17-3.el5_6
- xulrunner RHEL 6 1.9.2.17-4.el6_0
red hat advisories RHSA-2011:0471
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2011-0065 updated cvss 6.8
Mozilla mChannel use after free (MFSA 2011-13)
-
Red Hat Enterprise Linux (v. 5.6.z server) firefox 3.6.17-1.el5_6, xulrunner 1.9.2.17-3.el5_6 Red Hat Enterprise Linux AS version 4 firefox 3.6.17-2.el4 Red Hat Enterprise Linux Desktop (v. 6) firefox 3.6.17-1.el6_0, xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux Desktop version 4 firefox 3.6.17-2.el4 Red Hat Enterprise Linux ES version 4 firefox 3.6.17-2.el4fixed: vendor fix RHSA-2011:0471
+6 more productsfewer
Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox 3.6.17-1.el6_0, xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux Server (v. 6) firefox 3.6.17-1.el6_0, xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux Server Optional (v. 6) xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux Workstation (v. 6) firefox 3.6.17-1.el6_0, xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner 1.9.2.17-4.el6_0 Red Hat Enterprise Linux WS version 4 firefox 3.6.17-2.el4
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- Published
- First public exploit (Metasploit exploit/osx/browser/mozilla_mchannel)
Exploit prediction
74.42% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/osx/browser/mozilla_mchannel Mozilla Firefox 3.6.16 mChannel Use-After-Free metasploit exploit, normal rank, 2011-05-10
- Metasploit exploit/windows/browser/mozilla_mchannel Mozilla Firefox 3.6.16 mChannel Use-After-Free Vulnerability metasploit exploit, normal rank, 2011-05-10
- EDB-18377 Mozilla Firefox 3.6.16 (OSX) - mChannel Use-After-Free (Metasploit) (2) remote, 2012-01-17
- EDB-17672 Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free remote, 2011-08-16
- EDB-17650 Mozilla Firefox 3.6.16 (Windows) - mChannel Use-After-Free (Metasploit) (1) remote, 2011-08-10
- EDB-17612 Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit) remote, 2011-08-05
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
References
-
debian.org
/security/2011/dsa-2228
vendor-advisory
-
mandriva.com
/security/advisories?name=MDVSA-2011:079
vendor-advisory
-
debian.org
/security/2011/dsa-2235
vendor-advisory
-
debian.org
/security/2011/dsa-2227
vendor-advisory
-
mozilla.org
/security/announce/2011/mfsa2011-13.html
vendor-advisory
-
securityreason.com
/securityalert/8340
third-party-advisory
-
securityreason.com
/securityalert/8331
third-party-advisory
- bugzilla.mozilla.org /show_bug.cgi?id=634986
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14142
vdb-entry, signature
-
securityreason.com
/securityalert/8326
third-party-advisory
- downloads.avaya.com /css/P8/documents/100144158
Sources
- CVE List CVE-2011-0065
- NVD CVE-2011-0065
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.