Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14285
https://bugzilla.mozilla.org/show_bug.cgi?id=665934
http://www.securityfocus.com/bid/49226
http://www.mozilla.org/security/announce/2011/mfsa2011-33.html
http://www.mozilla.org/security/announce/2011/mfsa2011-31.html
http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
http://secunia.com/advisories/49055
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html