CVE:CVE-2011-2372
CNNVD:CNNVD-201109-604
Mozilla Firefox 3.6.23之前版本和4.x至6版本，Thunderbird 7.0之前版本以及SeaMonkey 2.4之前版本不能阻止响应抓住回车键的下载开始。用户辅助的远程攻击者可借助特制的web站点绕过预先的访问限制。
solution:Upgrade mozilla firefox to a higher version than 3.6.22,3.6,3.6.2,3.6.3,3.6.4,3.6.6,3.6.7,3.6.8,3.6.9,3.6.10,3.6.11,3.6.12,3.6.13,3.6.14,3.6.15,3.6.16,3.6.17,3.6.18,3.6.19,3.6.20,3.6.21,4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,6.0,and avoid the version (,3.6.22],3.6,3.6.2,3.6.3,3.6.4,3.6.6,3.6.7,3.6.8,3.6.9,3.6.10,3.6.11,3.6.12,3.6.13,3.6.14,3.6.15,3.6.16,3.6.17,3.6.18,3.6.19,3.6.20,3.6.21,4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,6.0; Upgrade mozilla thunderbird to a higher version than 6.0.2,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.0.13,1.5.0.14,1.5.1,1.5.2,1.7.1,1.7.3,2.0,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,2.0.0.21,2.0.0.22,2.0.0.23,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.1.6,3.1.7,3.1.8,3.1.9,3.1.10,3.1.11,5.0,and avoid the version (,6.0.2],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.0.13,1.5.0.14,1.5.1,1.5.2,1.7.1,1.7.3,2.0,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,2.0.0.21,2.0.0.22,2.0.0.23,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.1.6,3.1.7,3.1.8,3.1.9,3.1.10,3.1.11,5.0; Upgrade mozilla seamonkey to a higher version than 2.3.3,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.99,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.5:1.1.10,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0a1,2.0a1pre,2.1:alpha1,2.1:alpha2,2.1:alpha3,and avoid the version (,2.3.3],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.99,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.5:1.1.10,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0a1,2.0a1pre,2.1:alpha1,2.1:alpha2,2.1:alpha3