CVE-2011-2999

Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, a different vulnerability than CVE-2010-0170.

• mozilla firefox (<= 3.6.22) • mozilla firefox 3.6 • mozilla firefox 3.6.2 • mozilla firefox 3.6.3 • mozilla firefox 3.6.4 • mozilla firefox 3.6.6 • mozilla firefox 3.6.7 • mozilla firefox 3.6.8 • mozilla firefox 3.6.9 • mozilla firefox 3.6.10 • mozilla firefox 3.6.11 • mozilla firefox 3.6.12 • mozilla firefox 3.6.13 • mozilla firefox 3.6.14 • mozilla firefox 3.6.15 • mozilla firefox 3.6.16 • mozilla firefox 3.6.17 • mozilla firefox 3.6.18 • mozilla firefox 3.6.19 • mozilla firefox 3.6.20 • mozilla firefox 3.6.21 • mozilla firefox 4.0 • mozilla firefox 4.0.1 • mozilla firefox 5.0 • mozilla thunderbird (<= 5.0) • mozilla thunderbird 0.1 • mozilla thunderbird 0.2 • mozilla thunderbird 0.3 • mozilla thunderbird 0.4 • mozilla thunderbird 0.5 • mozilla thunderbird 0.6 • mozilla thunderbird 0.7 • mozilla thunderbird 0.7.1 • mozilla thunderbird 0.7.2 • mozilla thunderbird 0.7.3 • mozilla thunderbird 0.8 • mozilla thunderbird 0.9 • mozilla thunderbird 1.0 • mozilla thunderbird 1.0.1 • mozilla thunderbird 1.0.2 • mozilla thunderbird 1.0.3 • mozilla thunderbird 1.0.4 • mozilla thunderbird 1.0.5 • mozilla thunderbird 1.0.6 • mozilla thunderbird 1.0.7 • mozilla thunderbird 1.0.8 • mozilla thunderbird 1.5 • mozilla thunderbird 1.5.0.1 • mozilla thunderbird 1.5.0.2 • mozilla thunderbird 1.5.0.3 • mozilla thunderbird 1.5.0.4 • mozilla thunderbird 1.5.0.5 • mozilla thunderbird 1.5.0.6 • mozilla thunderbird 1.5.0.7 • mozilla thunderbird 1.5.0.8 • mozilla thunderbird 1.5.0.9 • mozilla thunderbird 1.5.0.10 • mozilla thunderbird 1.5.0.11 • mozilla thunderbird 1.5.0.12 • mozilla thunderbird 1.5.0.13 … and 114 more