CVE-2011-1179

NameCVE-2011-1179
DescriptionThe SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
spice-xpisourcejessie(unfixed)end-of-life
spice-xpisource(unstable)(unfixed)

Notes

[jessie] - spice-xpi <end-of-life> (Broken with newer Firefox versions)

Search for package or bug name: Reporting problems