CVE catalog

CVE-2011-0065

icedove - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
74.42% · Oct 25, 2026

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel. Mozilla mChannel use after free (MFSA 2011-13) The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceape6.02.0.11-2vulnerable
Debianiceape6.02.0.11-3vulnerable
Debianiceape6.02.0.11-4vulnerable
Debianiceape6.02.0.11-5fixed
Debianiceweasel6.03.5.16-4vulnerable
Debianiceweasel6.03.5.16-5vulnerable
Debianiceweasel6.03.5.16-5~bpo50+1vulnerable
Debianiceweasel6.03.5.16-6vulnerable
Debianiceweasel6.03.5.16-6~bpo50+1vulnerable
Debianiceweasel6.03.5.16-7~bpo50+1vulnerable
Debianiceweasel6.03.5.16-7fixed
Debianicedove6.03.0.11-1vulnerable
Debianicedove6.03.0.11-1+squeeze1vulnerable
Debianicedove6.03.0.11-1+squeeze2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceapedeb6.02.0.11-5Not reportedDSA-2227-1Not reported
Debianiceweaseldeb6.03.5.16-7Not reportedDSA-2228-1Not reported
Debianicedovedeb6.03.0.11-1+squeeze2Not reportedDSA-2235-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References