CVE ID:	CVE-2010-3168
Description:	Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.
Test IDs:	1.3.6.1.4.1.25623.1.0.68088   1.3.6.1.4.1.25623.1.0.67979
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3168 BugTraq ID: 43108 http://www.securityfocus.com/bid/43108 Debian Security Information: DSA-2106 (Google Search) http://www.debian.org/security/2010/dsa-2106 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12001 http://secunia.com/advisories/42867 SuSE Security Announcement: SUSE-SA:2010:049 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html http://www.vupen.com/english/advisories/2010/2323 http://www.vupen.com/english/advisories/2011/0061 XForce ISS Database: firefox-xultree-objects-code-exec(61653) https://exchange.xforce.ibmcloud.com/vulnerabilities/61653