CVE-2011-3650: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 2.3% chance of exploitation in the next 30 days.

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.

Affected products

• Mozilla Firefox: up to and including 3.6.23; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …
• Mozilla Thunderbird: up to and including 3.1.5; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2011-11-09. Last modified 2026-06-16.