{"vulnerability": "cve-2011-0065", "sightings": [{"uuid": "eb8d5612-7c12-48d4-90d3-025144fde16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "ce64ec1b-65b2-41f6-8171-d0aa4b3410ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:52.000000Z"}, {"uuid": "f2ccfc82-67c9-41f1-b9f8-c1d571ffa2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:51.000000Z"}, {"uuid": "d97c1370-34b2-4fb4-ada1-63b74fd48661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:15.000000Z"}, {"uuid": "3c518215-f783-450f-ba08-18e1d31d49c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_mchannel.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2fcde24b-e50d-4b95-a610-60c06b59986a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/mozilla_mchannel.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "4b8a5d77-f4bd-453e-8c19-13a1418a8224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0065", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/17612", "content": "", "creation_timestamp": "2011-08-05T00:00:00.000000Z"}, {"uuid": "ba987205-75e3-4c2f-99a4-fd2841570ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0065", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/17650", "content": "", "creation_timestamp": "2011-08-10T00:00:00.000000Z"}, {"uuid": "a5f7f1e5-9cda-4a5e-93f0-6ada847a6f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0065", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18377", "content": "", "creation_timestamp": "2012-01-17T00:00:00.000000Z"}, {"uuid": "dc673dab-f8fe-4a79-993b-30a740a48df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0065", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/17672", "content": "", "creation_timestamp": "2011-08-16T00:00:00.000000Z"}, {"uuid": "f4a68823-688b-404b-b7ec-4da0494fa17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/mozilla_mchannel.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"regenrecht\", \"Rh0\", \"argp \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a use-after-free vulnerability in Mozilla\\n          Firefox 3.6.16. An OBJECT element, mChannel, can be freed via the\\n          OnChannelRedirect method of the nsIChannelEventSink Interface. mChannel\\n          becomes a dangling pointer and can be reused when setting the OBJECTs\\n          data attribute. This module has been tested on Mac OS X 10.6.6, 10.6.7,\\n          10.6.8, 10.7.2 and 10.7.3.\", \"disclosure_date\": \"2011-05-10\", \"fullname\": \"exploit/osx/browser/mozilla_mchannel\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Mozilla Firefox 3.6.16 mChannel Use-After-Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/osx/browser/mozilla_mchannel.rb\", \"platform\": \"OSX\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"osx/browser/mozilla_mchannel\", \"references\": [\"CVE-2011-0065\", \"OSVDB-72085\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=634986\", \"URL-http://www.mozilla.org/security/announce/2011/mfsa2011-13.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Firefox 3.6.16 on Mac OS X (10.6.6, 10.6.7, 10.6.8, 10.7.2 and 10.7.3)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:29.562673Z"}, {"uuid": "1a9e8d6c-1504-4316-9ee1-4427fc613eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0065", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_mchannel.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"regenrecht\", \"Rh0\", \"mr_me \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a use after free vulnerability in Mozilla\\n          Firefox 3.6.16. An OBJECT Element mChannel can be freed via the\\n          OnChannelRedirect method of the nsIChannelEventSink Interface. mChannel\\n          becomes a dangling pointer and can be reused when setting the OBJECTs\\n          data attribute. (Discovered by regenrecht). This module uses heapspray\\n          with a minimal ROP chain to bypass DEP on Windows XP SP3. Additionlay,\\n          a windows 7 target was provided using JAVA 6 and below to avoid aslr.\", \"disclosure_date\": \"2011-05-10\", \"fullname\": \"exploit/windows/browser/mozilla_mchannel\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Mozilla Firefox 3.6.16 mChannel Use-After-Free Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/mozilla_mchannel.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/mozilla_mchannel\", \"references\": [\"CVE-2011-0065\", \"OSVDB-72085\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=634986\", \"URL-http://www.mozilla.org/security/announce/2011/mfsa2011-13.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"Firefox 3.6.16 on Windows XP SP3\", \"Firefox 3.6.16 on Windows 7 + Java\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:06.998628Z"}]}