http://www.mozilla.org/security/announce/2011/mfsa2011-30.ht...">
Mozilla Firefox was updated to version 3.6.20.
It fixes bugs and security issues. Following security
issues were fixed:
<a href=โhttp://www.mozilla.org/security/announce/2011/mfsa2011-30.htโ>http://www.mozilla.org/security/announce/2011/mfsa2011-30.ht</a>
ml Mozilla Foundation Security Advisory 2011-30 (MFSA
2011-30)
Mozilla developers and community members identified and
fixed several memory safety bugs in the browser engine used
in Firefox 3.6 and other Mozilla-based products. Some of
these bugs showed evidence of memory corruption under
certain circumstances, and we presume that with enough
effort at least some of these could be exploited to run
arbitrary code.
Gary Kwong, Igor Bukanov, Nils and Bob Clary reported
memory safety issues which affected Firefox 3.6.
(CVE-2011-2982)
Security researcher regenrecht reported via
TippingPointโs Zero Day Initiative that a SVG text
manipulation routine contained a dangling pointer
vulnerability. (CVE-2011-0084)
Mozilla security researcher moz_bug_r_a_4 reported a
vulnerability in event management code that would permit
JavaScript to be run in the wrong context, including that
of a different website or potentially in a
chrome-privileged context. (CVE-2011-2981)
Security researcher regenrecht reported via
TippingPointโs Zero Day Initiative that appendChild did
not correctly account for DOM objects it operated upon and
could be exploited to dereference an invalid pointer.
(CVE-2011-2378)
Mozilla security researcher moz_bug_r_a4 reported that
web content could receive chrome privileges if it
registered for drop events and a browser tab element was
dropped into the content area. (CVE-2011-2984)
Security researcher Mitja Kolsek of Acros Security
reported that ThinkPadSensor::Startup could potentially be
exploited to load a malicious DLL into the running process.
(CVE-2011-2980) (This issue is likely Windows only)
Security researcher shutdown reported that data from
other domains could be read when RegExp.input was set.
(CVE-2011-2983)