# CVEs published 2011-09-29

14 CVEs were published on September 29, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2372](https://cve.now/CVE-2011-2372.md): Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download (no CVSS)
- [CVE-2011-2995](https://cve.now/CVE-2011-2995.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and S (no CVSS)
- [CVE-2011-2996](https://cve.now/CVE-2011-2996.md): Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (mem (no CVSS)
- [CVE-2011-2997](https://cve.now/CVE-2011-2997.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remo (no CVSS)
- [CVE-2011-2999](https://cve.now/CVE-2011-2999.md): Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the n (no CVSS)
- [CVE-2011-3000](https://cve.now/CVE-2011-3000.md): Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that (no CVSS)
- [CVE-2011-3001](https://cve.now/CVE-2011-3001.md): Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the (no CVSS)
- [CVE-2011-3002](https://cve.now/CVE-2011-3002.md): Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return va (no CVSS)
- [CVE-2011-3003](https://cve.now/CVE-2011-3003.md): Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly exec (no CVSS)
- [CVE-2011-3004](https://cve.now/CVE-2011-3004.md): The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to t (no CVSS)
- [CVE-2011-3005](https://cve.now/CVE-2011-3005.md): Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to c (no CVSS)
- [CVE-2011-3232](https://cve.now/CVE-2011-3232.md): YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-3504](https://cve.now/CVE-2011-3504.md): The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2011-3866](https://cve.now/CVE-2011-3866.md): Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.