• Security Center
  • Security Advisories
  • Known Vulnerabilities
  • Bug Bounty
  • Security Blog

You are here: Security Center > Mozilla Foundation Security Advisories > MFSA 2011-42

Mozilla Foundation Security Advisory 2011-42

Title: Potentially exploitable crash in the YARR regular expression library
Impact: Critical
Announced: September 27, 2011
Reporter: Aki Helin
Products: Firefox, Thunderbird, SeaMonkey

Fixed in: Firefox 7.0
  Thunderbird 7.0
  SeaMonkey 2.4

Description

Security researcher Aki Helin reported a potentially exploitable crash in the YARR regular expression library used by JavaScript.

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=653672
• https://bugs.webkit.org/show_bug.cgi?id=61585
• CVE-2011-3232