CVE-2011-0061

Publication date 2 March 2011

Last updated 24 July 2024

Ubuntu priority

Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	10.10 maverick	Fixed 3.6.14+build3+nobinonly-0ubuntu0.10.10.1
	10.04 LTS lucid	Fixed 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
	9.10 karmic	Not in release
	8.04 LTS hardy	Ignored end of life
	6.06 LTS dapper	Ignored end of life
firefox-3.0	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	8.04 LTS hardy	Fixed 3.6.14+build3+nobinonly-0ubuntu0.8.04.1
	6.06 LTS dapper	Not in release
firefox-3.5	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	9.10 karmic	Fixed 3.6.14+build3+nobinonly-0ubuntu0.9.10.1
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release
thunderbird	10.10 maverick	Fixed 3.1.8+build3+nobinonly-0ubuntu0.10.10.1
	10.04 LTS lucid	Fixed 3.1.8+build3+nobinonly-0ubuntu0.10.04.1
	9.10 karmic	Not affected
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Not in release
xulrunner-1.9.2	10.10 maverick	Fixed 1.9.2.14+build3+nobinonly-0ubuntu0.10.10.1
	10.04 LTS lucid	Fixed 1.9.2.14+build3+nobinonly-0ubuntu0.10.04.1
	9.10 karmic	Fixed 1.9.2.14+build3+nobinonly-0ubuntu0.9.10.1
	8.04 LTS hardy	Fixed 1.9.2.14+build3+nobinonly-0ubuntu0.8.04.1
	6.06 LTS dapper	Not in release

References

Related Ubuntu Security Notices (USN)

USN-1049-1
Firefox and Xulrunner vulnerabilities
3 March 2011

USN-1050-1
Thunderbird vulnerabilities
3 March 2011

Other references

https://www.cve.org/CVERecord?id=CVE-2011-0061