CVE-2011-2987: Mozilla Firefox

High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Mozilla Firefox: version 4.0 only; version 4.0.1 only; version 5.0 only
• Mozilla Seamonkey: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …
• Mozilla Thunderbird: up to and including 5.0; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2011-08-18. Last modified 2026-06-16.