QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-3660

Back to search

CVE-2011-3660

Published: Dec 21, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDVSA-2011:192
vendor-advisory
x_refsource_MANDRIVA
47334
third-party-advisory
x_refsource_SECUNIA
1026447
vdb-entry
x_refsource_SECTRACK
1026446
vdb-entry
x_refsource_SECTRACK
oval:org.mitre.oval:def:14226
vdb-entry
signature
x_refsource_OVAL
49055
third-party-advisory
x_refsource_SECUNIA
1026445
vdb-entry
x_refsource_SECTRACK
77952
vdb-entry
x_refsource_OSVDB
firefox-safety-bugs-ce(71908)
vdb-entry
x_refsource_XF
47302
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:0039
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2012:0007
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now