Mozilla Firefox, Mozilla Thunderbird, Red Hat Desktop, Red Hat Enterprise Linux

ソフト名：Mozilla Firefox 3.6.20未満, Mozilla Thunderbird 3.1.12未満, Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6

回避策：アップデート, MFSA 2011-30, MFSA 2011-32にて対応, RHSA-2011:1164-1, RHSA-2011:1165-1, RHSA-2011:1166-1, RHSA-2011:1167-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, システムアクセス, 不特定のエラー, メモリ破壊, 解放後使用エラー, 不正Java Scriptコード実行, ポインタ間接参照エラー, リモートコード実行, 不正ライブラリのロード

ソース：

http://mozilla.jp/firefox/

https://www.mozilla.org/en-US/thunderbird/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://www.mozilla.org/security/announce/2011/mfsa2011-30.html

http://www.mozilla.org/security/announce/2011/mfsa2011-32.html

https://rhn.redhat.com/errata/RHSA-2011-1164.html

http://rhn.redhat.com/errata/RHSA-2011-1165.html

https://rhn.redhat.com/errata/RHSA-2011-1166.html

http://rhn.redhat.com/errata/RHSA-2011-1167.html

http://www.zerodayinitiative.com/advisories/ZDI-11-270/

http://www.zerodayinitiative.com/advisories/ZDI-11-271/

http://secunia.com/advisories/45650/

http://secunia.com/advisories/45651/

http://secunia.com/advisories/45652/

http://secunia.com/advisories/45666/

http://secunia.com/advisories/45669/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2378

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2980

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2981

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2982

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2983

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2984

CVE：CVE-2011-0084, CVE-2011-2378, CVE-2011-2980, CVE-2011-2981, CVE-2011-2982, CVE-2011-2983, CVE-2011-2984

危険性：High Risk