Every CVE Search/ Get API key

CVE-2011-2998

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a...

10.0 HighFix available

CVE-2011-2998 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published September 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.37%, the 92nd percentile. Fixed in iceape 2.0.11-8.

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Exploit likelihood

5.37%Down 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Record
CVE-2011-2998
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Record
CVE-2011-2998
Updated
2026-11-02
EUVDEUVD-2011-2966 No score

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Record
EUVD-2011-2966
Updated
2026-11-03
GitHub AdvisoriesGHSA-2rjf-9fvj-83c2 No score

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a...

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.

Record
GHSA-2rjf-9fvj-83c2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iceape
Debian:6.0
 before 2.0.11-8, plus listed versions
2.0.11-22.0.11-32.0.11-42.0.11-52.0.11-62.0.11-7
2.0.11-8
iceweasel
Debian:6.0
 before 3.5.16-10, plus listed versions
3.5.16-10~bpo50+13.5.16-43.5.16-53.5.16-5~bpo50+13.5.16-6
Show 6 moreShow less
3.5.16-6~bpo50+13.5.16-73.5.16-7~bpo50+13.5.16-83.5.16-8~bpo50+13.5.16-9
3.5.16-10
xulrunner
Debian:5.0
 before 1.9.0.19-14, plus listed versions
1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1
Show 27 moreShow less
1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.19-11.9.0.19-111.9.0.19-121.9.0.19-131.9.0.19-21.9.0.19-31.9.0.19-41.9.0.19-51.9.0.19-61.9.0.19-71.9.0.19-81.9.0.19-91.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1
1.9.0.19-14
icedove
Debian:6.0
 before 3.0.11-1+squeeze5, plus listed versions
3.0.11-13.0.11-1+squeeze13.0.11-1+squeeze23.0.11-1+squeeze33.0.11-1+squeeze4
3.0.11-1+squeeze5
firefox
Red Hat:enterprise_linux:4::as
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox
Red Hat:enterprise_linux:4::desktop
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox
Red Hat:enterprise_linux:4::es
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
Show 61 moreShow less
Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:4::ws
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:3.6.23-1.el4
0:3.6.23-1.el4
firefox
Red Hat:enterprise_linux:5::client
 before 0:3.6.23-2.el5_7
0:3.6.23-2.el5_7
firefox-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.6.23-2.el5_7
0:3.6.23-2.el5_7
xulrunner
Red Hat:enterprise_linux:5::client
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
xulrunner
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
firefox
Red Hat:enterprise_linux:5::server
 before 0:3.6.23-2.el5_7
0:3.6.23-2.el5_7
firefox-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.6.23-2.el5_7
0:3.6.23-2.el5_7
xulrunner
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
xulrunner-devel
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.23-1.el5_7
0:1.9.2.23-1.el5_7
firefox
Red Hat:enterprise_linux:6::server
 before 0:3.6.23-2.el6_1
0:3.6.23-2.el6_1
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.6.23-2.el6_1
0:3.6.23-2.el6_1
xulrunner
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.23-1.el6_1.1
0:1.9.2.23-1.el6_1.1
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.23-1.el6_1.1
0:1.9.2.23-1.el6_1.1
xulrunner-devel
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.23-1.el6_1.1
0:1.9.2.23-1.el6_1.1
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:3.1.15-1.el6_1
0:3.1.15-1.el6_1
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.1.15-1.el6_1
0:3.1.15-1.el6_1
thunderbird
Red Hat:enterprise_linux:4::as
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird
Red Hat:enterprise_linux:4::desktop
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird
Red Hat:enterprise_linux:4::es
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird
Red Hat:enterprise_linux:4::ws
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.5.0.12-44.el4
0:1.5.0.12-44.el4
thunderbird
Red Hat:enterprise_linux:5::client
 before 0:2.0.0.24-26.el5_7
0:2.0.0.24-26.el5_7
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.0.0.24-26.el5_7
0:2.0.0.24-26.el5_7
thunderbird
Red Hat:rhel_productivity:5
 before 0:2.0.0.24-26.el5_7
0:2.0.0.24-26.el5_7
thunderbird-debuginfo
Red Hat:rhel_productivity:5
 before 0:2.0.0.24-26.el5_7
0:2.0.0.24-26.el5_7
seamonkey
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-chat
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-devel
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-mail
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-chat
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-devel
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-mail
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-chat
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-devel
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-mail
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-chat
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-devel
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4
seamonkey-mail
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-76.el4
0:1.0.9-76.el4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open