CVE-2011-3660

Published: Dec 21, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.

Affected (100)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

100 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 4.0.1
Mozilla Firefox	Version 4.0
Mozilla Firefox	Version 4.0 beta10
Mozilla Firefox	Version 4.0 beta11
Mozilla Firefox	Version 4.0 beta12
Mozilla Firefox	Version 4.0 beta1
Mozilla Firefox	Version 4.0 beta2
Mozilla Firefox	Version 4.0 beta3
Mozilla Firefox	Version 4.0 beta4
Mozilla Firefox	Version 4.0 beta5
Mozilla Firefox	Version 4.0 beta6
Mozilla Firefox	Version 4.0 beta7
Mozilla Firefox	Version 4.0 beta8
Mozilla Firefox	Version 4.0 beta9
Mozilla Firefox	Version 5.0.1
Mozilla Firefox	Version 5.0
Mozilla Firefox	Version 6.0.1
Mozilla Firefox	Version 6.0.2
Mozilla Firefox	Version 6.0
Mozilla Firefox	Version 7.0.1
Mozilla Firefox	Version 7.0
Mozilla Firefox	Version 8.0
Mozilla Seamonkey	Up to 2.5
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.99
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 alpha
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.10
Mozilla Seamonkey	Version 1.1.11
Mozilla Seamonkey	Version 1.1.12
Mozilla Seamonkey	Version 1.1.13
Mozilla Seamonkey	Version 1.1.14
Mozilla Seamonkey	Version 1.1.15
Mozilla Seamonkey	Version 1.1.16
Mozilla Seamonkey	Version 1.1.17
Mozilla Seamonkey	Version 1.1.18
Mozilla Seamonkey	Version 1.1.19
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.5 1.1.10
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1.9
Mozilla Seamonkey	Version 1.1
Mozilla Seamonkey	Version 1.1 alpha
Mozilla Seamonkey	Version 1.1 beta
Mozilla Seamonkey	Version 1.5.0.10
Mozilla Seamonkey	Version 1.5.0.8
Mozilla Seamonkey	Version 1.5.0.9
Mozilla Seamonkey	Version 2.0.10
Mozilla Seamonkey	Version 2.0.11
Mozilla Seamonkey	Version 2.0.12
Mozilla Seamonkey	Version 2.0.13
Mozilla Seamonkey	Version 2.0.14
Mozilla Seamonkey	Version 2.0.1
Mozilla Seamonkey	Version 2.0.2
Mozilla Seamonkey	Version 2.0.3
Mozilla Seamonkey	Version 2.0.4
Mozilla Seamonkey	Version 2.0.5
Mozilla Seamonkey	Version 2.0.6
Mozilla Seamonkey	Version 2.0.7
Mozilla Seamonkey	Version 2.0.8
Mozilla Seamonkey	Version 2.0.9
Mozilla Seamonkey	Version 2.0
Mozilla Seamonkey	Version 2.0 alpha_1
Mozilla Seamonkey	Version 2.0 alpha_2
Mozilla Seamonkey	Version 2.0 alpha_3
Mozilla Seamonkey	Version 2.0 beta_1
Mozilla Seamonkey	Version 2.0 beta_2
Mozilla Seamonkey	Version 2.0 rc1
Mozilla Seamonkey	Version 2.0 rc2
Mozilla Seamonkey	Version 2.0a1
Mozilla Seamonkey	Version 2.0a1pre
Mozilla Seamonkey	Version 2.1 alpha1
Mozilla Seamonkey	Version 2.1 alpha2
Mozilla Seamonkey	Version 2.1 alpha3
Mozilla Seamonkey	Version 2.3.3
Mozilla Thunderbird	Version 5.0
Mozilla Thunderbird	Version 6.0.1
Mozilla Thunderbird	Version 6.0.2
Mozilla Thunderbird	Version 6.0
Mozilla Thunderbird	Version 7.0.1
Mozilla Thunderbird	Version 7.0
Mozilla Thunderbird	Version 8.0

References (72)

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html

Source: cve@mitre.org

http://osvdb.org/77952

Source: cve@mitre.org

http://secunia.com/advisories/47302

Source: cve@mitre.org

http://secunia.com/advisories/47334

Source: cve@mitre.org

http://secunia.com/advisories/49055

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:192

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2011/mfsa2011-53.html

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id?1026445

Source: cve@mitre.org

http://www.securitytracker.com/id?1026446

Source: cve@mitre.org

http://www.securitytracker.com/id?1026447

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=562442

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=679494

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=679986

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=680687

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=682252

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=685186

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=685321

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=686107

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=688364

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=688974

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=689892

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=690376

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=691746

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=691873

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=693143

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=693144

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=694200

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=696579

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=697255

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=700512

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=701248

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=701637

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=706249

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/71908

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14226

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html