critical10.0
CVE-2011-3660
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remo…
Impact
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 4.0, 4.0.1, 5.0, 5.0.1, 6.0, 6.0.1 |
| Mozilla | Seamonkey | through 2.5 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
| Mozilla | Thunderbird | Versions 5.0, 6.0, 6.0.1, 6.0.2, 7.0, 7.0.1 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html
- http://osvdb.org/77952
- http://secunia.com/advisories/47302
- http://secunia.com/advisories/47334
- http://secunia.com/advisories/49055
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:192
- http://www.mozilla.org/security/announce/2011/mfsa2011-53.html
- http://www.securitytracker.com/id?1026445
- http://www.securitytracker.com/id?1026446
- http://www.securitytracker.com/id?1026447
- https://bugzilla.mozilla.org/show_bug.cgi?id=562442
- https://bugzilla.mozilla.org/show_bug.cgi?id=679494
- https://bugzilla.mozilla.org/show_bug.cgi?id=679986
- https://bugzilla.mozilla.org/show_bug.cgi?id=680687
- https://bugzilla.mozilla.org/show_bug.cgi?id=682252
- https://bugzilla.mozilla.org/show_bug.cgi?id=685186
- https://bugzilla.mozilla.org/show_bug.cgi?id=685321
- https://bugzilla.mozilla.org/show_bug.cgi?id=686107
- https://bugzilla.mozilla.org/show_bug.cgi?id=688364
- https://bugzilla.mozilla.org/show_bug.cgi?id=688974
- https://bugzilla.mozilla.org/show_bug.cgi?id=689892
- https://bugzilla.mozilla.org/show_bug.cgi?id=690376
- https://bugzilla.mozilla.org/show_bug.cgi?id=691746
- https://bugzilla.mozilla.org/show_bug.cgi?id=691873