<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2011-0083" target="_blank">CVE</a>)</em> : Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.

Upgrade Thunderbird to 3.1.11 or higher and Firefox to 3.6.18 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• OVAL ID: 13543
• CVE ID: 2011-0083 (see also: NVD)
• Secunia Advisory ID: 44972 44982 45002 45011 45012 45014 45038 45104 45114 45115 45138 45147 45220 45268 47636 51766
• Related OSVDB ID: 73186 73187
• Vendor Specific Advisory URL: http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird1
  http://lists.debian.org/debian-security-announce/2011/msg00139.html
  http://lists.debian.org/debian-security-announce/2011/msg00141.html
  http://www.mozilla.org/security/announce/2011/mfsa2011-23.html
  http://www.ubuntu.com/usn/usn-1150-1/
  https://hermes.opensuse.org/messages/9086893
• Vendor Specific News/Changelog Entry: http://lists.debian.org/debian-security-announce/2011/msg00145.html
  http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062409.html
  http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062410.html
  http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062413.html
  http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html
  http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html
  http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
  http://support.avaya.com/css/P8/documents/100144854
  http://support.avaya.com/css/P8/documents/100145333
  http://www.gentoo.org/security/en/glsa/glsa-201301-01.xml
  https://bugzilla.mozilla.org/show_bug.cgi?id=648090 [ Auth Req'd ]
  https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-June/001360.html
• Mail List Post: http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
• Other Advisory URL: http://www.debian.org/security/2011/dsa-2268
  http://www.debian.org/security/2011/dsa-2269
  http://www.debian.org/security/2011/dsa-2273
  http://www.mandriva.com/security/advisories?name=MDVSA-2011:111
  http://www.ubuntu.com/usn/USN-1149-1
  http://www.zerodayinitiative.com/advisories/ZDI-11-223/
• RedHat RHSA: RHSA-2011:0885 RHSA-2011:0886 RHSA-2011:0887 RHSA-2011:0888

• regenrecht - Zero Day Initiative (ZDI)