CVE-2011-3651 | Vulnerability Database | Aqua Security

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected Software

Name	Vendor	Start Version	End Version
Firefox	Mozilla	7.0 (including)	7.0 (including)
Thunderbird	Mozilla	7.0 (including)	7.0 (including)
Firefox	Ubuntu	hardy	*
Firefox	Ubuntu	lucid	*
Firefox	Ubuntu	maverick	*
Firefox	Ubuntu	natty	*
Firefox	Ubuntu	oneiric	*
Seamonkey	Ubuntu	hardy	*
Seamonkey	Ubuntu	lucid	*
Seamonkey	Ubuntu	maverick	*
Seamonkey	Ubuntu	natty	*
Seamonkey	Ubuntu	oneiric	*
Thunderbird	Ubuntu	hardy	*
Thunderbird	Ubuntu	lucid	*
Thunderbird	Ubuntu	maverick	*
Thunderbird	Ubuntu	natty	*
Thunderbird	Ubuntu	oneiric	*
Xulrunner-1.9.2	Ubuntu	hardy	*
Xulrunner-1.9.2	Ubuntu	lucid	*
Xulrunner-1.9.2	Ubuntu	maverick	*
Xulrunner-1.9.2	Ubuntu	natty	*
Xulrunner-2.0	Ubuntu	natty	*

References

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html
http://secunia.com/advisories/49055
http://www.mozilla.org/security/announce/2011/mfsa2011-48.html
https://bugzilla.mozilla.org/show_bug.cgi?id=646968
https://bugzilla.mozilla.org/show_bug.cgi?id=652054
https://bugzilla.mozilla.org/show_bug.cgi?id=665070
https://bugzilla.mozilla.org/show_bug.cgi?id=671160
https://bugzilla.mozilla.org/show_bug.cgi?id=672892
https://bugzilla.mozilla.org/show_bug.cgi?id=675515
https://bugzilla.mozilla.org/show_bug.cgi?id=676918
https://bugzilla.mozilla.org/show_bug.cgi?id=677847
https://bugzilla.mozilla.org/show_bug.cgi?id=679593
https://bugzilla.mozilla.org/show_bug.cgi?id=686044
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14364

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-3651
CWE	https://cwe.mitre.org/data/definitions/.html