Multiple memory corruption flaws exist in multiple Mozilla products. The programs fail to sanitize unspecified user-supplied input, resulting in memory corruption. This may allow a context-dependent attacker to execute arbitrary code.

Upgrade Firefox to version 6 or higher, Thunderbird to version 6 or higher, and SeaMonkey to version 2.3 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• CVE ID: 2011-2985 (see also: NVD)
• Secunia Advisory ID: 45581 45667 45785 45802 45808 49055 51766
• Related OSVDB ID: 74581 74582 74583 74584 74585 74586 74587 74589 74590 74591 74592 74593 74594 74595 74596
• Vendor Specific Advisory URL: http://lists.opensuse.org/opensuse-updates/2011-08/msg00039.html
  http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
  http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
  http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
  http://www.suse.com/support/security/advisories/2011_37_firefox.html
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-updates/2011-08/msg00043.html
  http://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html
  http://www.gentoo.org/security/en/glsa/glsa-201301-01.xml
  https://bugzilla.mozilla.org/show_bug.cgi?id=646825 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=648206 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=650273 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=650275 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=650732 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=651030 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=660517 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=662132 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=665518 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=667092 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=667315 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=667512 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=668245 [ Auth Req'd ]
  https://bugzilla.mozilla.org/show_bug.cgi?id=669584 [ Auth Req'd ]

Unknown or Incomplete