Test ID:	1.3.6.1.4.1.25623.1.0.902779
Category:	General
Title:	Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Mac OS X
Summary:	Mozilla Firefox/Thunderbird/Seamonkey is prone to out of bounds memory corruption vulnerability.
Description:	Summary: Mozilla Firefox/Thunderbird/Seamonkey is prone to out of bounds memory corruption vulnerability. Vulnerability Insight: The flaw is due to error in SVG implementation which results in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. Vulnerability Impact: Successful exploitation will let attackers to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Affected Software/OS: SeaMonkey version 2.5 Thunderbird version 8.0 Mozilla Firefox version 8.0 Solution: Upgrade to Mozilla Firefox version 9.0 or later, Upgrade to SeaMonkey version to 2.6 or later, Upgrade to Thunderbird version to 9.0 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3658 http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://osvdb.org/77953 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14664 http://www.securitytracker.com/id?1026445 http://www.securitytracker.com/id?1026446 http://www.securitytracker.com/id?1026447 http://secunia.com/advisories/47302 http://secunia.com/advisories/47334 http://secunia.com/advisories/48495 http://secunia.com/advisories/48553 http://secunia.com/advisories/48823 http://secunia.com/advisories/49055 SuSE Security Announcement: openSUSE-SU-2012:0007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html SuSE Security Announcement: openSUSE-SU-2012:0039 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html SuSE Security Announcement: openSUSE-SU-2012:0417 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://www.ubuntu.com/usn/USN-1401-1 XForce ISS Database: firefox-domattrmodified-code-exec(71910) https://exchange.xforce.ibmcloud.com/vulnerabilities/71910
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.