Candidate: CVE-2011-3666
PublicDate: 2011-12-21 04:02:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3666
 http://www.mozilla.org/security/announce/2011/mfsa2011-59.html
Description:
 Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do
 not consider .jar files to be executable files, which allows user-assisted
 remote attackers to bypass intended access restrictions via a crafted file.
  NOTE: this vulnerability exists because of an incorrect fix for
 CVE-2011-2372 on Mac OS X.
Ubuntu-Description:
Notes:
 tyhicks> Looks to be OS X specific
Bugs:
 https://bugzilla.mozilla.org/show_bug.cgi?id=704622
Priority: medium
Discovered-by:
Assigned-to: micahg
CVSS: 

Patches_firefox:
upstream_firefox: needs-triage
hardy_firefox: ignored (reached end-of-life)
lucid_firefox: not-affected
maverick_firefox: ignored (reached end-of-life)
natty_firefox: not-affected
oneiric_firefox: not-affected
precise_firefox: not-affected
devel_firefox: not-affected

Patches_xulrunner-1.9.2:
upstream_xulrunner-1.9.2: needs-triage
hardy_xulrunner-1.9.2: ignored (reached end-of-life)
lucid_xulrunner-1.9.2: ignored (see notes)
maverick_xulrunner-1.9.2: ignored (reached end-of-life)
natty_xulrunner-1.9.2: ignored (universe-binary)
oneiric_xulrunner-1.9.2: DNE
precise_xulrunner-1.9.2: DNE
devel_xulrunner-1.9.2: DNE

Patches_xulrunner-2.0:
upstream_xulrunner-2.0: needs-triage
hardy_xulrunner-2.0: DNE
lucid_xulrunner-2.0: DNE
maverick_xulrunner-2.0: DNE
natty_xulrunner-2.0: ignored (does not process internet content)
oneiric_xulrunner-2.0: DNE
precise_xulrunner-2.0: DNE
devel_xulrunner-2.0: DNE


Patches_seamonkey:
upstream_seamonkey: needs-triage
hardy_seamonkey: ignored (reached end-of-life)
lucid_seamonkey: not-affected
maverick_seamonkey: ignored (reached end-of-life)
natty_seamonkey: not-affected
oneiric_seamonkey: not-affected
precise_seamonkey: DNE
devel_seamonkey: DNE


Patches_thunderbird:
upstream_thunderbird: needs-triage
hardy_thunderbird: ignored (reached end-of-life)
lucid_thunderbird: not-affected
maverick_thunderbird: ignored (reached end-of-life)
natty_thunderbird: not-affected
oneiric_thunderbird: not-affected
precise_thunderbird: not-affected
devel_thunderbird: not-affected