CVE ID:	CVE-2011-2981
Description:	The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Test IDs:	1.3.6.1.4.1.25623.1.0.70231   1.3.6.1.4.1.25623.1.0.70230   1.3.6.1.4.1.25623.1.0.70232
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2981 Debian Security Information: DSA-2295 (Google Search) http://www.debian.org/security/2011/dsa-2295 Debian Security Information: DSA-2296 (Google Search) http://www.debian.org/security/2011/dsa-2296 Debian Security Information: DSA-2297 (Google Search) http://www.debian.org/security/2011/dsa-2297 http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14512 RedHat Security Advisories: RHSA-2011:1164 http://www.redhat.com/support/errata/RHSA-2011-1164.html SuSE Security Announcement: SUSE-SA:2011:037 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html SuSE Security Announcement: SUSE-SU-2011:0967 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html