CVE-2011-2983

Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web site, possibly related to a use-after-free.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-1185-1
• Thunderbird vulnerabilities
• 26 August 2011
• USN-1184-1
• Firefox and Xulrunner vulnerabilities
• 19 August 2011

Other references

• https://www.cve.org/CVERecord?id=CVE-2011-2983