| Name | CVE-2011-3079 |
| Description | The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-3260-1 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| chromium-browser | source | squeeze | (unfixed) | end-of-life | ||
| chromium-browser | source | (unstable) | 18.0.1025.168~r134367-1 | |||
| icedove | source | (unstable) | (not affected) | |||
| iceweasel | source | wheezy | 31.7.0esr-1~deb7u1 | DSA-3260-1 | ||
| iceweasel | source | jessie | 31.7.0esr-1~deb8u1 | DSA-3260-1 | ||
| iceweasel | source | (unstable) | (not affected) |
- iceweasel <not-affected> (Only affects Firefox on Windows)
- icedove <not-affected> (Only affects Thunderbird on Windows)
https://www.mozilla.org/en-US/security/advisories/mfsa2015-57/