CVE-2011-2991

CVE-2011-2991 describes a critical memory corruption vulnerability in the JavaScript engine of Mozilla Firefox 4.x-5, SeaMonkey 2.x, and Thunderbird before 6. This flaw allows remote attackers to trigger a denial of service (application crash) or potentially execute arbitrary code through unspecified vectors. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.