CVE-2011-2981
First published: Thu Aug 18 2011(Updated: )
The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | =3.6.2 | |
| Mozilla Firefox | =2.0.0.12 | |
| Mozilla Firefox | =3.5.18 | |
| Mozilla Firefox | =1.5-beta2 | |
| Mozilla Firefox | =3.0.17 | |
| Mozilla Firefox | =3.5.3 | |
| Mozilla Firefox | =3.0.7 | |
| Mozilla Firefox | =1.5.2 | |
| Mozilla Firefox | =3.0.9 | |
| Mozilla Firefox | =1.5.0.6 | |
| Mozilla Firefox | =3.6.3 | |
| Mozilla Firefox | <=3.6.19 | |
| Mozilla Firefox | =2.0.0.2 | |
| Mozilla Firefox | =1.5.0.10 | |
| Mozilla Firefox | =1.5.0.3 | |
| Mozilla Firefox | =3.5.6 | |
| Mozilla Firefox | =3.0.8 | |
| Mozilla Firefox | =1.5.0.11 | |
| Mozilla Firefox | =1.5.4 | |
| Mozilla Firefox | =1.0.2 | |
| Mozilla Firefox | =3.5 | |
| Mozilla Firefox | =3.5.5 | |
| Mozilla Firefox | =3.0.4 | |
| Mozilla Firefox | =1.5-beta1 | |
| Mozilla Firefox | =3.5.9 | |
| Mozilla Firefox | =3.5.4 | |
| Mozilla Firefox | =3.5.7 | |
| Mozilla Firefox | =3.0.5 | |
| Mozilla Firefox | =3.5.11 | |
| Mozilla Firefox | =1.5 | |
| Mozilla Firefox | =3.5.14 | |
| Mozilla Firefox | =1.0.4 | |
| Mozilla Firefox | =3.6.15 | |
| Mozilla Firefox | =2.0.0.7 | |
| Mozilla Firefox | =1.0.7 | |
| Mozilla Firefox | =3.5.10 | |
| Mozilla Firefox | =3.5.1 | |
| Mozilla Firefox | =2.0.0.9 | |
| Mozilla Firefox | =3.0.14 | |
| Mozilla Firefox | =3.5.2 | |
| Mozilla Firefox | =3.6.17 | |
| Mozilla Firefox | =2.0.0.16 | |
| Mozilla Firefox | =3.6.11 | |
| Mozilla Firefox | =1.5.6 | |
| Mozilla Firefox | =2.0.0.17 | |
| Mozilla Firefox | =3.6.8 | |
| Mozilla Firefox | =2.0.0.15 | |
| Mozilla Firefox | =3.0.10 | |
| Mozilla Firefox | =3.6.9 | |
| Mozilla Firefox | =3.6.14 | |
| Mozilla Firefox | =3.0.12 | |
| Mozilla Firefox | =1.0 | |
| Mozilla Firefox | =3.0.3 | |
| Mozilla Firefox | =1.5.0.7 | |
| Mozilla Firefox | =3.6.12 | |
| Mozilla Firefox | =2.0 | |
| Mozilla Firefox | =1.0.1 | |
| Mozilla Firefox | =3.5.17 | |
| Mozilla Firefox | =2.0.0.14 | |
| Mozilla Firefox | =3.0.6 | |
| Mozilla Firefox | =3.0.15 | |
| Mozilla Firefox | =1.5.0.8 | |
| Mozilla Firefox | =2.0.0.3 | |
| Mozilla Firefox | =3.5.12 | |
| Mozilla Firefox | =1.5.0.9 | |
| Mozilla Firefox | =3.6.6 | |
| Mozilla Firefox | =1.5.0.5 | |
| Mozilla Firefox | =1.5.7 | |
| Mozilla Firefox | =1.5.0.12 | |
| Mozilla Firefox | =2.0.0.6 | |
| Mozilla Firefox | =3.0 | |
| Mozilla Firefox | =2.0.0.11 | |
| Mozilla Firefox | =1.5.0.2 | |
| Mozilla Firefox | =3.6.16 | |
| Mozilla Firefox | =1.0.3 | |
| Mozilla Firefox | =3.0.1 | |
| Mozilla Firefox | =2.0.0.4 | |
| Mozilla Firefox | =1.5.1 | |
| Mozilla Firefox | =3.6.10 | |
| Mozilla Firefox | =2.0.0.13 | |
| Mozilla Firefox | =2.0.0.18 | |
| Mozilla Firefox | =3.5.13 | |
| Mozilla Firefox | =2.0.0.1 | |
| Mozilla Firefox | =3.0.2 | |
| Mozilla Firefox | =3.5.19 | |
| Mozilla Firefox | =3.5.8 | |
| Mozilla Firefox | =3.6.7 | |
| Mozilla Firefox | =1.5.5 | |
| Mozilla Firefox | =1.0-preview_release | |
| Mozilla Firefox | =3.6.4 | |
| Mozilla Firefox | =3.6.18 | |
| Mozilla Firefox | =3.5.15 | |
| Mozilla Firefox | =3.6 | |
| Mozilla Firefox | =2.0.0.20 | |
| Mozilla Firefox | =2.0.0.8 | |
| Mozilla Firefox | =2.0.0.19 | |
| Mozilla Firefox | =1.5.8 | |
| Mozilla Firefox | =3.6.13 | |
| Mozilla Firefox | =1.5.3 | |
| Mozilla Firefox | =1.5.0.4 | |
| Mozilla Firefox | =1.5.0.1 | |
| Mozilla Firefox | =3.0.13 | |
| Mozilla Firefox | =3.5.16 | |
| Mozilla Firefox | =1.0.5 | |
| Mozilla Firefox | =2.0.0.5 | |
| Mozilla Firefox | =2.0.0.10 | |
| Mozilla Firefox | =1.0.6 | |
| Mozilla Firefox | =3.0.16 | |
| Mozilla Firefox | =1.0.8 | |
| Mozilla Firefox | =3.0.11 | |
| Mozilla SeaMonkey | =2.0.10 | |
| Mozilla SeaMonkey | =2.0.13 | |
| Mozilla SeaMonkey | =2.0.4 | |
| Mozilla SeaMonkey | =2.1-alpha2 | |
| Mozilla SeaMonkey | =2.0.3 | |
| Mozilla SeaMonkey | =2.0.2 | |
| Mozilla SeaMonkey | =2.0-alpha_2 | |
| Mozilla SeaMonkey | =2.0.8 | |
| Mozilla SeaMonkey | =2.0-rc2 | |
| Mozilla SeaMonkey | =2.0-alpha_3 | |
| Mozilla SeaMonkey | =2.0.12 | |
| Mozilla SeaMonkey | =2.0.11 | |
| Mozilla SeaMonkey | =2.0-beta_2 | |
| Mozilla SeaMonkey | =2.0-alpha_1 | |
| Mozilla SeaMonkey | =2.0.9 | |
| Mozilla SeaMonkey | =2.1-alpha1 | |
| Mozilla SeaMonkey | =2.0.1 | |
| Mozilla SeaMonkey | =2.0.14 | |
| Mozilla SeaMonkey | =2.0.7 | |
| Mozilla SeaMonkey | =2.0-beta_1 | |
| Mozilla SeaMonkey | =2.0.5 | |
| Mozilla SeaMonkey | =2.0-rc1 | |
| Mozilla SeaMonkey | =2.0.6 | |
| Mozilla SeaMonkey | =2.1-alpha3 | |
| Mozilla SeaMonkey | =2.0 | |
| Mozilla Thunderbird | =3.0.8 | |
| Mozilla Thunderbird | =3.0.5 | |
| Mozilla Thunderbird | =3.1.8 | |
| Mozilla Thunderbird | =3.1.11 | |
| Mozilla Thunderbird | =3.0.9 | |
| Mozilla Thunderbird | =3.0.1 | |
| Mozilla Thunderbird | =3.1.7 | |
| Mozilla Thunderbird | =3.1.2 | |
| Mozilla Thunderbird | =3.1.9 | |
| Mozilla Thunderbird | =3.1.1 | |
| Mozilla Thunderbird | =3.1.4 | |
| Mozilla Thunderbird | =3.0.7 | |
| Mozilla Thunderbird | =3.0.6 | |
| Mozilla Thunderbird | =3.0.10 | |
| Mozilla Thunderbird | =3.0.3 | |
| Mozilla Thunderbird | =3.1.5 | |
| Mozilla Thunderbird | =3.0.11 | |
| Mozilla Thunderbird | =3.1.10 | |
| Mozilla Thunderbird | =3.0.4 | |
| Mozilla Thunderbird | =3.0 | |
| Mozilla Thunderbird | =3.1 | |
| Mozilla Thunderbird | =3.1.3 | |
| Mozilla Thunderbird | =3.1.6 | |
| Mozilla Thunderbird | =3.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.mozilla.org/security/announce/2011/mfsa2011-30.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=643450
- https://bugzilla.mozilla.org/show_bug.cgi?id=614151
- https://bugzilla.mozilla.org/show_bug.cgi?id=650252
- http://www.redhat.com/support/errata/RHSA-2011-1164.html
- http://www.debian.org/security/2011/dsa-2295
- http://www.debian.org/security/2011/dsa-2296
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:127
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html
- http://www.debian.org/security/2011/dsa-2297
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14512
- agent/references
- agent/type
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/tags
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/mozilla
- canonical/mozilla firefox
- version/mozilla firefox/3.6.2
- version/mozilla firefox/2.0.0.12
- version/mozilla firefox/3.5.18
- version/mozilla firefox/1.5-beta2
- version/mozilla firefox/3.0.17
- version/mozilla firefox/3.5.3
- version/mozilla firefox/3.0.7
- version/mozilla firefox/1.5.2
- version/mozilla firefox/3.0.9
- version/mozilla firefox/1.5.0.6
- version/mozilla firefox/3.6.3
- version/mozilla firefox/3.6.19
- version/mozilla firefox/2.0.0.2
- version/mozilla firefox/1.5.0.10
- version/mozilla firefox/1.5.0.3
- version/mozilla firefox/3.5.6
- version/mozilla firefox/3.0.8
- version/mozilla firefox/1.5.0.11
- version/mozilla firefox/1.5.4
- version/mozilla firefox/1.0.2
- version/mozilla firefox/3.5
- version/mozilla firefox/3.5.5
- version/mozilla firefox/3.0.4
- version/mozilla firefox/1.5-beta1
- version/mozilla firefox/3.5.9
- version/mozilla firefox/3.5.4
- version/mozilla firefox/3.5.7
- version/mozilla firefox/3.0.5
- version/mozilla firefox/3.5.11
- version/mozilla firefox/1.5
- version/mozilla firefox/3.5.14
- version/mozilla firefox/1.0.4
- version/mozilla firefox/3.6.15
- version/mozilla firefox/2.0.0.7
- version/mozilla firefox/1.0.7
- version/mozilla firefox/3.5.10
- version/mozilla firefox/3.5.1
- version/mozilla firefox/2.0.0.9
- version/mozilla firefox/3.0.14
- version/mozilla firefox/3.5.2
- version/mozilla firefox/3.6.17
- version/mozilla firefox/2.0.0.16
- version/mozilla firefox/3.6.11
- version/mozilla firefox/1.5.6
- version/mozilla firefox/2.0.0.17
- version/mozilla firefox/3.6.8
- version/mozilla firefox/2.0.0.15
- version/mozilla firefox/3.0.10
- version/mozilla firefox/3.6.9
- version/mozilla firefox/3.6.14
- version/mozilla firefox/3.0.12
- version/mozilla firefox/1.0
- version/mozilla firefox/3.0.3
- version/mozilla firefox/1.5.0.7
- version/mozilla firefox/3.6.12
- version/mozilla firefox/2.0
- version/mozilla firefox/1.0.1
- version/mozilla firefox/3.5.17
- version/mozilla firefox/2.0.0.14
- version/mozilla firefox/3.0.6
- version/mozilla firefox/3.0.15
- version/mozilla firefox/1.5.0.8
- version/mozilla firefox/2.0.0.3
- version/mozilla firefox/3.5.12
- version/mozilla firefox/1.5.0.9
- version/mozilla firefox/3.6.6
- version/mozilla firefox/1.5.0.5
- version/mozilla firefox/1.5.7
- version/mozilla firefox/1.5.0.12
- version/mozilla firefox/2.0.0.6
- version/mozilla firefox/3.0
- version/mozilla firefox/2.0.0.11
- version/mozilla firefox/1.5.0.2
- version/mozilla firefox/3.6.16
- version/mozilla firefox/1.0.3
- version/mozilla firefox/3.0.1
- version/mozilla firefox/2.0.0.4
- version/mozilla firefox/1.5.1
- version/mozilla firefox/3.6.10
- version/mozilla firefox/2.0.0.13
- version/mozilla firefox/2.0.0.18
- version/mozilla firefox/3.5.13
- version/mozilla firefox/2.0.0.1
- version/mozilla firefox/3.0.2
- version/mozilla firefox/3.5.19
- version/mozilla firefox/3.5.8
- version/mozilla firefox/3.6.7
- version/mozilla firefox/1.5.5
- version/mozilla firefox/1.0-preview_release
- version/mozilla firefox/3.6.4
- version/mozilla firefox/3.6.18
- version/mozilla firefox/3.5.15
- version/mozilla firefox/3.6
- version/mozilla firefox/2.0.0.20
- version/mozilla firefox/2.0.0.8
- version/mozilla firefox/2.0.0.19
- version/mozilla firefox/1.5.8
- version/mozilla firefox/3.6.13
- version/mozilla firefox/1.5.3
- version/mozilla firefox/1.5.0.4
- version/mozilla firefox/1.5.0.1
- version/mozilla firefox/3.0.13
- version/mozilla firefox/3.5.16
- version/mozilla firefox/1.0.5
- version/mozilla firefox/2.0.0.5
- version/mozilla firefox/2.0.0.10
- version/mozilla firefox/1.0.6
- version/mozilla firefox/3.0.16
- version/mozilla firefox/1.0.8
- version/mozilla firefox/3.0.11
- canonical/mozilla seamonkey
- version/mozilla seamonkey/2.0.10
- version/mozilla seamonkey/2.0.13
- version/mozilla seamonkey/2.0.4
- version/mozilla seamonkey/2.1-alpha2
- version/mozilla seamonkey/2.0.3
- version/mozilla seamonkey/2.0.2
- version/mozilla seamonkey/2.0-alpha_2
- version/mozilla seamonkey/2.0.8
- version/mozilla seamonkey/2.0-rc2
- version/mozilla seamonkey/2.0-alpha_3
- version/mozilla seamonkey/2.0.12
- version/mozilla seamonkey/2.0.11
- version/mozilla seamonkey/2.0-beta_2
- version/mozilla seamonkey/2.0-alpha_1
- version/mozilla seamonkey/2.0.9
- version/mozilla seamonkey/2.1-alpha1
- version/mozilla seamonkey/2.0.1
- version/mozilla seamonkey/2.0.14
- version/mozilla seamonkey/2.0.7
- version/mozilla seamonkey/2.0-beta_1
- version/mozilla seamonkey/2.0.5
- version/mozilla seamonkey/2.0-rc1
- version/mozilla seamonkey/2.0.6
- version/mozilla seamonkey/2.1-alpha3
- version/mozilla seamonkey/2.0
- canonical/mozilla thunderbird
- version/mozilla thunderbird/3.0.8
- version/mozilla thunderbird/3.0.5
- version/mozilla thunderbird/3.1.8
- version/mozilla thunderbird/3.1.11
- version/mozilla thunderbird/3.0.9
- version/mozilla thunderbird/3.0.1
- version/mozilla thunderbird/3.1.7
- version/mozilla thunderbird/3.1.2
- version/mozilla thunderbird/3.1.9
- version/mozilla thunderbird/3.1.1
- version/mozilla thunderbird/3.1.4
- version/mozilla thunderbird/3.0.7
- version/mozilla thunderbird/3.0.6
- version/mozilla thunderbird/3.0.10
- version/mozilla thunderbird/3.0.3
- version/mozilla thunderbird/3.1.5
- version/mozilla thunderbird/3.0.11
- version/mozilla thunderbird/3.1.10
- version/mozilla thunderbird/3.0.4
- version/mozilla thunderbird/3.0
- version/mozilla thunderbird/3.1
- version/mozilla thunderbird/3.1.3
- version/mozilla thunderbird/3.1.6
- version/mozilla thunderbird/3.0.2