NetSight
IP …
critical10.0

CVE-2011-2984

Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element…

Impact

Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events.

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.6.19
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaSeamonkey
Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5
MozillaThunderbird
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5

Weakness classification

CWE-94

References