Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-2981
HistoryAug 18, 2011 - 6:55 p.m.

CVE-2011-2981

2011-08-1818:55:00
CWE-16
[email protected]
web.nvd.nist.gov
56
cve-2011-2981
mozilla firefox
seamonkey
same origin policy
javascript
remote code execution

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

86.0%

JSON

The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.

Related

veracode 1
prion 1
ubuntucve 1
cvelist 1
openvas 34
nessus 25
debian 4
redhat 1
osv 3
ubuntu 2
oraclelinux 1
centos 1
suse 4
mozilla 2
securityvulns 1
seebug 1
freebsd 1
gentoo 1
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:01:39
prion
prion
Design/Logic Flaw
2011-08-18 18:55:00
ubuntucve
ubuntucve
CVE-2011-2981
2011-08-19 00:00:00
cvelist
cvelist
CVE-2011-2981
2011-08-18 18:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (Windows)
2011-09-09 00:00:00
Mozilla Products Multiple Vulnerabilities - Windows
2011-09-09 00:00:00
CentOS Update for firefox CESA-2011:1164 centos4 i386
2011-08-19 00:00:00
nessus
nessus
Debian DSA-2297-1 : icedove - several vulnerabilities
2011-08-23 00:00:00
CentOS 4 / 5 : firefox / xulrunner (CESA-2011:1164)
2011-08-17 00:00:00
Oracle Linux 4 / 5 / 6 : firefox (ELSA-2011-1164)
2013-07-12 00:00:00
debian
debian
[SECURITY] [DSA 2295-1] iceape security update
2011-08-17 17:54:12
[BSA-046] Security Update for icedove
2011-09-01 07:06:17
[SECURITY] [DSA 2297-1] icedove security update
2011-08-21 19:15:08
redhat
redhat
(RHSA-2011:1164) Critical: firefox security update
2011-08-16 00:00:00
osv
osv
icedove - several
2011-08-21 00:00:00
iceape - several
2011-08-17 00:00:00
iceweasel - several
2011-08-17 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2011-08-19 00:00:00
Thunderbird vulnerabilities
2011-08-26 00:00:00
oraclelinux
oraclelinux
firefox security update
2011-08-16 00:00:00
centos
centos
firefox, xulrunner security update
2011-08-16 23:27:06
suse
suse
MozillaThunderbird: Update to 3.1.12 (important)
2011-08-29 20:08:38
Security update for Mozilla Firefox (important)
2011-08-29 21:08:22
MozillaFirefox: Update to Firefox 3.6.20 (important)
2011-08-26 20:08:19
mozilla
mozilla
Security issues addressed in Thunderbird 3.1.12 — Mozilla
2011-08-16 00:00:00
Security issues addressed in Firefox 3.6.20 — Mozilla
2011-08-16 00:00:00
securityvulns
securityvulns
Mozilla Fireox / Seamonkey / Thunderbird multiple security vulnerabilities
2011-08-19 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkey多个安全漏洞
2011-08-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

86.0%

JSON
Related for CVE-2011-2981
veracode1prion1ubuntucve1cvelist1openvas34nessus25debian4redhat1osv3ubuntu2oraclelinux1centos1suse4mozilla2securityvulns1seebug1freebsd1gentoo1