CVE:CVE-2006-3811
CNNVD:CNNVD-200607-474
Mozilla Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。
上述产品中存在多个安全漏洞，具体如下：
允许远程攻击者造成拒绝服务攻击(崩溃)和可能利用JAVA脚本导致内存溢出引起任意代码执行.这些漏洞包括:(1) nsListControlFrame::FireMenuItemActiveEvent, (2)string class缓冲区溢出  (3) 列表和栏目, (4) "UA样式表的匿名选择项," (5) removed nodes," 和(6)运行加密.CRMP请求恢复删除的文本
solution:Upgrade mozilla firefox to a higher version than 1.5,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,and avoid the version 1.5,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4; Upgrade mozilla seamonkey to a higher version than 1.0,1.0.1,1.0.2,and avoid the version 1.0,1.0.1,1.0.2; Upgrade mozilla thunderbird to a higher version than 1.5,1.5.0.2,1.5.0.4,and avoid the version 1.5,1.5.0.2,1.5.0.4