據發現，CVE-2011-3004 可以解決附加元件中可能的權限提升，也影響了 Thunderbird 3.1。攻擊者可能惡意利用已安裝附加元件的使用者，該附加元件會以容易遭受攻擊的方式使用 loadSubscript。(CVE-2011-3647)

Yosuke Hasegawa 發現 Mozilla 瀏覽器引擎錯誤處理 Shift-JIS 編碼中的無效序列。若在不使用偵錯 API 的情況下觸發此損毀情況，可能會讓惡意網站惡意利用此弱點。攻擊者可能利用此瑕疵來竊取資料，或將惡意指令碼插入到 web 內容。(CVE-2011-3648)

Marc Schoenefeld 發現使用 Firebug 分析帶多個函式的 JavaScript 檔案，可導致 Firefox 損毀。攻擊者可在不使用除錯 API 的情況下，惡意利用此問題，可能允許攻擊者遠端損毀 Thunderbird。
(CVE-2011-3650)。

遠端主機受到 GLSA-201301-01 中所述的弱點影響 (Mozilla 產品：多個弱點)

在 Mozilla Firefox、Thunderbird、SeaMonkey、NSS、GNU IceCat 與 XULRunner 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可引誘使用者檢視特製的網頁或電子郵件，進而可能導致執行任意程式碼或拒絕服務情況。此外，遠端攻擊者或許能夠執行攔截式攻擊、取得敏感資訊、繞過限制及保護機制、強制檔案下載、發動 XML 插入攻擊、發動 XSS 攻擊、繞過同源原則、偽造 URL 以發動網路釣魚攻擊、觸發垂直捲動、偽造位置列、偽造 SSL 指示器、修改瀏覽器的字型、發動點擊劫持攻擊，或造成其他不明的影響。
 本機攻擊者可取得提升的權限、取得敏感資訊，或取代任意下載檔案。
 因應措施：

目前尚無已知的因應措施。

Versions of Firefox prior to 7.0 are affected by the following security issues : 

 - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and executed. (CVE-2011-2372)
 - Unspecified errors exist that can be exploited to corrupt memory.  No additional information is available at this time. (CVE-2011-2995, CVE-2011-2997)
 - A weakness exists when handling the 'Location' header.  This can lead to response splitting attacks when visiting a vulnerable web server.  The same fix has been applied to the headers 'Content-Length' and 'Content-Disposition'. (CVE-2011-3000)
 - An error exists within WebGL's ANGLE library.  It does not properly check for return values from the 'GrowAtomTable()' function.  This vulnerability can be exploited to cause a buffer overflow by sending a series of requests.  Additionally, an unspecified error exists within WebGL that can be exploited to corrupt memory. (CVE-2011-3002, CVE-2011-3003)
 - There is an error within the JSSubScriptLoader that incorrectly unwraps 'XPCNativeWrappers'.  By tricking a user into installing a malicious plug-in, an attacker could exploit this issue to execute arbitrary code. (CVE-2011-3004)
 - A use-after-free error exists when parsing OGG headers. (CVE-2011-3005)
 - There is an unspecified error within the YARR regular expression library that can be exploited to corrupt memory. (CVE-2011-3232)

Versions of SeaMonkey earlier than 2.4.0 are potentially affected by multiple vulnerabilities : 

  - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and executed. (CVE-2011-2372, CVE-2011-3001)

  - Unspecified errors exist that can be exploited to corrupt memory.  No additional information is available at this time. (CVE-2011-2995, CVE-2011-2997)

  - A weakness exists when handling the 'Location' header.  This can be lead to response splitting attacks when visiting a vulnerable web server.  The same fix has been applied to the headers 'Content-Length' and 'Content-Disposition'. (CVE-2011-3000)

  - An error exists with WebGL's ANGLE library.  It does not properly check for return values from the 'GrowAtomTable()' function.  This vulnerability can be exploited to cause a buffer overflow by sending a series of requests.  Additionally, an unspecified error exists within WebGL that can be exploited to corrupt memory. (CVE-2011-3002, CVE-2011-3003)

  - There is an error within the JSSubScriptLoader that incorrectly unwraps 'XPCNativeWrappers'.  By tricking a user into installing a malicious plug-in, an attacker could exploit this issue to execute arbitrary code. (CVE-2011-3004)

  - A use-after-free error exists when parsing OGG headers. (CVE-2011-3005)

  - There is an unspecified error within the YARR regular expression library that can be exploited to corrupt memory. (CVE-2011-3232)

The remote host has a web browser installed that is vulnerable to multiple attack vectors.

Versions of Firefox 6.0 are potentially affected by the following security issues : 

  - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and executed. (CVE-2011-2372)

  - Unspecified errors exist that can be exploited to corrupt memory.  No additional information is available at this time. (CVE-2011-2995, CVE-2011-2997)

  - A weakness exists when handling the 'Location' header.  This can lead to response splitting attacks when visiting a vulnerable web server.  The same fix has been applied to the headers 'Content-Length' and 'Content-Disposition'. (CVE-2011-3000)

  - An error exists within WebGL's ANGLE library.  It does not properly check for return values from the 'GrowAtomTable()' function.  This vulnerability can be exploited to cause a buffer overflow by sending a series of requests.  Additionally, an unspecified error exists within WebGL that can be exploited to corrupt memory. (CVE-2011-3002, CVE-2011-3003)

  - There is an error within the JSSubScriptLoader that incorrectly unwraps 'XPCNativeWrappers'.  By tricking a user into installing a malicious plug-in, an attacker could exploit this issue to execute arbitrary code. (CVE-2011-3004)

  - A use-after-free error exists when parsing OGG headers. (CVE-2011-3005)

  - There is an unspecified error within the YARR regular expression library that can be exploited to corrupt memory. (CVE-2011-3232)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
57393	Ubuntu 10.04 LTS / 10.10 / 11.04：thunderbird 弱點 (USN-1254-1)	Nessus	Ubuntu Local Security Checks	2011/12/23	2019/9/19	high
63402	GLSA-201301-01：Mozilla 產品：多個弱點 (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2022/12/5	critical
6028	Mozilla Firefox < 7.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2011/9/29	2019/3/6	high
6030	SeaMonkey 2.x < 2.4.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2011/9/29	2019/3/6	high
801285	Mozilla Firefox 6.0 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2011/9/29		high
801225	Mozilla SeaMonkey 2.x < 2.4.0 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2011/9/29		high

検出

プラグインの検索

high

critical

high

high

high

high