CVE-2011-2984

Published: Aug 18, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events.

Affected (210)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

110 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 3.6.19
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.0 preview_release
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.15
Mozilla Firefox	Version 2.0.0.16
Mozilla Firefox	Version 2.0.0.17
Mozilla Firefox	Version 2.0.0.18
Mozilla Firefox	Version 2.0.0.19
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.20
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 3.0.10
Mozilla Firefox	Version 3.0.11
Mozilla Firefox	Version 3.0.12
Mozilla Firefox	Version 3.0.13
Mozilla Firefox	Version 3.0.14
Mozilla Firefox	Version 3.0.15
Mozilla Firefox	Version 3.0.16
Mozilla Firefox	Version 3.0.17
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0.2
Mozilla Firefox	Version 3.0.3
Mozilla Firefox	Version 3.0.4
Mozilla Firefox	Version 3.0.5
Mozilla Firefox	Version 3.0.6
Mozilla Firefox	Version 3.0.7
Mozilla Firefox	Version 3.0.8
Mozilla Firefox	Version 3.0.9
Mozilla Firefox	Version 3.0
Mozilla Firefox	Version 3.5.10
Mozilla Firefox	Version 3.5.11
Mozilla Firefox	Version 3.5.12
Mozilla Firefox	Version 3.5.13
Mozilla Firefox	Version 3.5.14
Mozilla Firefox	Version 3.5.15
Mozilla Firefox	Version 3.5.16
Mozilla Firefox	Version 3.5.17
Mozilla Firefox	Version 3.5.18
Mozilla Firefox	Version 3.5.19
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Firefox	Version 3.5.6
Mozilla Firefox	Version 3.5.7
Mozilla Firefox	Version 3.5.8
Mozilla Firefox	Version 3.5.9
Mozilla Firefox	Version 3.5
Mozilla Firefox	Version 3.6.10
Mozilla Firefox	Version 3.6.11
Mozilla Firefox	Version 3.6.12
Mozilla Firefox	Version 3.6.13
Mozilla Firefox	Version 3.6.14
Mozilla Firefox	Version 3.6.15
Mozilla Firefox	Version 3.6.16
Mozilla Firefox	Version 3.6.17
Mozilla Firefox	Version 3.6.18
Mozilla Firefox	Version 3.6.2
Mozilla Firefox	Version 3.6.3
Mozilla Firefox	Version 3.6.4
Mozilla Firefox	Version 3.6.6
Mozilla Firefox	Version 3.6.7
Mozilla Firefox	Version 3.6.8
Mozilla Firefox	Version 3.6.9
Mozilla Firefox	Version 3.6

Configuration B

76 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Version 2.0.10
Mozilla Seamonkey	Version 2.0.11
Mozilla Seamonkey	Version 2.0.12
Mozilla Seamonkey	Version 2.0.13
Mozilla Seamonkey	Version 2.0.14
Mozilla Seamonkey	Version 2.0.1
Mozilla Seamonkey	Version 2.0.2
Mozilla Seamonkey	Version 2.0.3
Mozilla Seamonkey	Version 2.0.4
Mozilla Seamonkey	Version 2.0.5
Mozilla Seamonkey	Version 2.0.6
Mozilla Seamonkey	Version 2.0.7
Mozilla Seamonkey	Version 2.0.8
Mozilla Seamonkey	Version 2.0.9
Mozilla Seamonkey	Version 2.0
Mozilla Seamonkey	Version 2.0 alpha_1
Mozilla Seamonkey	Version 2.0 alpha_2
Mozilla Seamonkey	Version 2.0 alpha_3
Mozilla Seamonkey	Version 2.0 beta_1
Mozilla Seamonkey	Version 2.0 beta_2
Mozilla Seamonkey	Version 2.0 rc1
Mozilla Seamonkey	Version 2.0 rc2
Mozilla Seamonkey	Version 2.1
Mozilla Seamonkey	Version 2.1 alpha1
Mozilla Seamonkey	Version 2.1 alpha2
Mozilla Seamonkey	Version 2.1 alpha3
Mozilla Seamonkey	Version 2.1 beta1
Mozilla Seamonkey	Version 2.1 beta2
Mozilla Seamonkey	Version 2.1 beta3
Mozilla Seamonkey	Version 2.1 rc1
Mozilla Seamonkey	Version 2.1 rc2
Mozilla Seamonkey	Version 2.2
Mozilla Seamonkey	Version 2.2 beta1
Mozilla Seamonkey	Version 2.2 beta2
Mozilla Seamonkey	Version 2.2 beta3
Mozilla Seamonkey	Version 2.3.1
Mozilla Seamonkey	Version 2.3.2
Mozilla Seamonkey	Version 2.3.3
Mozilla Seamonkey	Version 2.3
Mozilla Seamonkey	Version 2.3 beta1
Mozilla Seamonkey	Version 2.3 beta2
Mozilla Seamonkey	Version 2.3 beta3
Mozilla Seamonkey	Version 2.4.1
Mozilla Seamonkey	Version 2.4
Mozilla Seamonkey	Version 2.4 beta1
Mozilla Seamonkey	Version 2.4 beta2
Mozilla Seamonkey	Version 2.4 beta3
Mozilla Seamonkey	Version 2.5
Mozilla Seamonkey	Version 2.5 beta1
Mozilla Seamonkey	Version 2.5 beta2
Mozilla Seamonkey	Version 2.5 beta3
Mozilla Seamonkey	Version 2.5 beta4
Mozilla Seamonkey	Version 2.6.1
Mozilla Seamonkey	Version 2.6
Mozilla Seamonkey	Version 2.6 beta1
Mozilla Seamonkey	Version 2.6 beta2
Mozilla Seamonkey	Version 2.6 beta3
Mozilla Seamonkey	Version 2.6 beta4
Mozilla Seamonkey	Version 2.7.1
Mozilla Seamonkey	Version 2.7.2
Mozilla Seamonkey	Version 2.7
Mozilla Seamonkey	Version 2.7 beta1
Mozilla Seamonkey	Version 2.7 beta2
Mozilla Seamonkey	Version 2.7 beta3
Mozilla Seamonkey	Version 2.7 beta4
Mozilla Seamonkey	Version 2.7 beta5
Mozilla Seamonkey	Version 2.8
Mozilla Seamonkey	Version 2.8 beta1
Mozilla Seamonkey	Version 2.8 beta2
Mozilla Seamonkey	Version 2.8 beta3
Mozilla Seamonkey	Version 2.8 beta4
Mozilla Seamonkey	Version 2.8 beta5
Mozilla Seamonkey	Version 2.8 beta6
Mozilla Seamonkey	Version 2.9 beta1
Mozilla Seamonkey	Version 2.9 beta2
Mozilla Seamonkey	Version 2.9 beta3

Configuration C

24 vulnerable

Vulnerable Software	Affected Versions
Mozilla Thunderbird	Version 3.0.10
Mozilla Thunderbird	Version 3.0.11
Mozilla Thunderbird	Version 3.0.1
Mozilla Thunderbird	Version 3.0.2
Mozilla Thunderbird	Version 3.0.3
Mozilla Thunderbird	Version 3.0.4
Mozilla Thunderbird	Version 3.0.5
Mozilla Thunderbird	Version 3.0.6
Mozilla Thunderbird	Version 3.0.7
Mozilla Thunderbird	Version 3.0.8
Mozilla Thunderbird	Version 3.0.9
Mozilla Thunderbird	Version 3.0
Mozilla Thunderbird	Version 3.1.10
Mozilla Thunderbird	Version 3.1.11
Mozilla Thunderbird	Version 3.1.1
Mozilla Thunderbird	Version 3.1.2
Mozilla Thunderbird	Version 3.1.3
Mozilla Thunderbird	Version 3.1.4
Mozilla Thunderbird	Version 3.1.5
Mozilla Thunderbird	Version 3.1.6
Mozilla Thunderbird	Version 3.1.7
Mozilla Thunderbird	Version 3.1.8
Mozilla Thunderbird	Version 3.1.9
Mozilla Thunderbird	Version 3.1