CVEvulnerability

CVE-2011-3660

10.0 HIGH Published 2011-12-21 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-12-21
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.

Affected configurations

• mozilla firefox 4.0 • mozilla firefox 4.0.1 • mozilla firefox 5.0 • mozilla firefox 5.0.1 • mozilla firefox 6.0 • mozilla firefox 6.0.1 • mozilla firefox 6.0.2 • mozilla firefox 7.0 • mozilla firefox 7.0.1 • mozilla firefox 8.0 • mozilla seamonkey (<= 2.5) • mozilla seamonkey 1.0 • mozilla seamonkey 1.0.1 • mozilla seamonkey 1.0.2 • mozilla seamonkey 1.0.3 • mozilla seamonkey 1.0.4 • mozilla seamonkey 1.0.5 • mozilla seamonkey 1.0.6 • mozilla seamonkey 1.0.7 • mozilla seamonkey 1.0.8 • mozilla seamonkey 1.0.9 • mozilla seamonkey 1.0.99 • mozilla seamonkey 1.1 • mozilla seamonkey 1.1.1 • mozilla seamonkey 1.1.2 • mozilla seamonkey 1.1.3 • mozilla seamonkey 1.1.4 • mozilla seamonkey 1.1.5 • mozilla seamonkey 1.1.6 • mozilla seamonkey 1.1.7 • mozilla seamonkey 1.1.8 • mozilla seamonkey 1.1.9 • mozilla seamonkey 1.1.10 • mozilla seamonkey 1.1.11 • mozilla seamonkey 1.1.12 • mozilla seamonkey 1.1.13 • mozilla seamonkey 1.1.14 • mozilla seamonkey 1.1.15 • mozilla seamonkey 1.1.16 • mozilla seamonkey 1.1.17 • mozilla seamonkey 1.1.18 • mozilla seamonkey 1.1.19 • mozilla seamonkey 1.5.0.8 • mozilla seamonkey 1.5.0.9 • mozilla seamonkey 1.5.0.10 • mozilla seamonkey 2.0 • mozilla seamonkey 2.0.1 • mozilla seamonkey 2.0.2 • mozilla seamonkey 2.0.3 • mozilla seamonkey 2.0.4 • mozilla seamonkey 2.0.5 • mozilla seamonkey 2.0.6 • mozilla seamonkey 2.0.7 • mozilla seamonkey 2.0.8 • mozilla seamonkey 2.0.9 • mozilla seamonkey 2.0.10 • mozilla seamonkey 2.0.11 • mozilla seamonkey 2.0.12 • mozilla seamonkey 2.0.13 • mozilla seamonkey 2.0.14 … and 11 more

References

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html lists.opensuse.org
http://osvdb.org/77952 osvdb.org
http://secunia.com/advisories/47302 secunia.com
http://secunia.com/advisories/47334 secunia.com
http://secunia.com/advisories/49055 secunia.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 www.mandriva.com
http://www.mozilla.org/security/announce/2011/mfsa2011-53.html Vendor Advisory
http://www.securitytracker.com/id?1026445 www.securitytracker.com
http://www.securitytracker.com/id?1026446 www.securitytracker.com
http://www.securitytracker.com/id?1026447 www.securitytracker.com
https://bugzilla.mozilla.org/show_bug.cgi?id=562442 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=679494 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=679986 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=680687 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=682252 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=685186 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=685321 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=686107 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=688364 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=688974 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=689892 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=690376 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=691746 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=691873 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=693143 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=693144 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=694200 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=696579 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=697255 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=700512 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=701248 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=701637 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=706249 bugzilla.mozilla.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/71908 exchange.xforce.ibmcloud.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14226 oval.cisecurity.org
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html lists.opensuse.org
http://osvdb.org/77952 osvdb.org
http://secunia.com/advisories/47302 secunia.com
http://secunia.com/advisories/47334 secunia.com
http://secunia.com/advisories/49055 secunia.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 www.mandriva.com
http://www.mozilla.org/security/announce/2011/mfsa2011-53.html Vendor Advisory
http://www.securitytracker.com/id?1026445 www.securitytracker.com
http://www.securitytracker.com/id?1026446 www.securitytracker.com
http://www.securitytracker.com/id?1026447 www.securitytracker.com
https://bugzilla.mozilla.org/show_bug.cgi?id=562442 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=679494 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=679986 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=680687 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=682252 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=685186 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=685321 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=686107 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=688364 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=688974 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=689892 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=690376 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=691746 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=691873 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=693143 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=693144 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=694200 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=696579 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=697255 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=700512 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=701248 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=701637 bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=706249 bugzilla.mozilla.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/71908 exchange.xforce.ibmcloud.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14226 oval.cisecurity.org