NetSight
IP …
medium4.3

CVE-2011-2999

Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, whi…

Impact

Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, a different vulnerability than CVE-2010-0170.

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.6.22
Versions 3.6, 3.6.2, 3.6.3, 3.6.4, 3.6.6
MozillaThunderbird
through 5.0
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaSeamonkey
through 2.1
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-264

References