CVE-2011-3005

CVE-2011-3005 describes a use-after-free vulnerability in Mozilla Firefox 4.x-6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4. This flaw allows remote attackers to trigger a denial of service or potentially execute arbitrary code through specially crafted OGG headers in a .ogg file. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and complete impact on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.