Skip to content
OpenAdvisories
Unscored DSA-2268-1 10 CVEs

iceweasel - several

Published Jul 1, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 xulrunner 1.9.0.19-12
Debian · 6.0 iceweasel 3.5.16-8

Vulnerabilities 10

  • Unscored —

    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists i…

  • Unscored —

    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird befor…

  • Unscored —

    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cooki…

  • Unscored —

    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists i…

  • Unscored —

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 al…

  • Unscored —
    CVE-2011-2371 Public exploit EPSS 76%

    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird be…

  • Unscored —

    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and Sea…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and …

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.…

  • Unscored —

    CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService…