CVE-2011-0065

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and...

10.0 HighPublic exploitFix available

CVE-2011-0065 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published April 30, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 74.4%, the 99th percentile. Fixed in iceape 2.0.11-5.

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.

Exploit likelihood

74.4%Down 10.5 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2011-0065
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-0065
Updated: 2026-11-02

EUVDEUVD-2011-0091 No score

Record: EUVD-2011-0091
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j27m-p5vq-3f4g No score

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and...

Record: GHSA-j27m-p5vq-3f4g
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`iceape` Debian:6.0	before 2.0.11-5, plus listed versions 2.0.11-22.0.11-32.0.11-4	2.0.11-5
`iceweasel` Debian:6.0	before 3.5.16-7, plus listed versions 3.5.16-43.5.16-53.5.16-5~bpo50+13.5.16-63.5.16-6~bpo50+13.5.16-7~bpo50+1	3.5.16-7
`icedove` Debian:6.0	before 3.0.11-1+squeeze2, plus listed versions 3.0.11-13.0.11-1+squeeze1	3.0.11-1+squeeze2
`firefox` Red Hat:enterprise_linux:4::as	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox-debuginfo` Red Hat:enterprise_linux:4::as	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox` Red Hat:enterprise_linux:4::desktop	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox` Red Hat:enterprise_linux:4::es	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox-debuginfo` Red Hat:enterprise_linux:4::es	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox` Red Hat:enterprise_linux:4::ws	before 0:3.6.17-2.el4	0:3.6.17-2.el4

Show 26 moreShow less

Affected packages
Package	Affected	Fixed
`firefox-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:3.6.17-2.el4	0:3.6.17-2.el4
`firefox` Red Hat:enterprise_linux:5::server	before 0:3.6.17-1.el5_6	0:3.6.17-1.el5_6
`firefox-debuginfo` Red Hat:enterprise_linux:5::server	before 0:3.6.17-1.el5_6	0:3.6.17-1.el5_6
`xulrunner` Red Hat:enterprise_linux:5::server	before 0:1.9.2.17-3.el5_6	0:1.9.2.17-3.el5_6
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::server	before 0:1.9.2.17-3.el5_6	0:1.9.2.17-3.el5_6
`xulrunner-devel` Red Hat:enterprise_linux:5::server	before 0:1.9.2.17-3.el5_6	0:1.9.2.17-3.el5_6
`xulrunner` Red Hat:enterprise_linux:6::client	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-devel` Red Hat:enterprise_linux:6::client	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`firefox` Red Hat:enterprise_linux:6::client	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`firefox-debuginfo` Red Hat:enterprise_linux:6::client	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`firefox` Red Hat:enterprise_linux:6::computenode	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`firefox-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`xulrunner` Red Hat:enterprise_linux:6::computenode	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner` Red Hat:enterprise_linux:6::server	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-devel` Red Hat:enterprise_linux:6::server	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`firefox` Red Hat:enterprise_linux:6::server	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`firefox-debuginfo` Red Hat:enterprise_linux:6::server	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`xulrunner` Red Hat:enterprise_linux:6::workstation	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`xulrunner-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.9.2.17-4.el6_0	0:1.9.2.17-4.el6_0
`firefox` Red Hat:enterprise_linux:6::workstation	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0
`firefox-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:3.6.17-1.el6_0	0:3.6.17-1.el6_0

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)	2011-08-05
Exploit-DB	Mozilla Firefox 3.6.16 (Windows) - mChannel Use-After-Free (Metasploit) (1)	2011-08-10
Exploit-DB	Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free	2011-08-16
Exploit-DB	Mozilla Firefox 3.6.16 (OSX) - mChannel Use-After-Free (Metasploit) (2)	2012-01-17
Metasploit	Mozilla Firefox 3.6.16 mChannel Use-After-Free	2011-05-10
Metasploit	Mozilla Firefox 3.6.16 mChannel Use-After-Free Vulnerability	2011-05-10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

References

Show 70 moreShow less