Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3647
HistoryNov 09, 2011 - 11:55 a.m.

CVE-2011-3647

2011-11-0911:55:00
CWE-20
[email protected]
web.nvd.nist.gov
43
mozilla firefox
thunderbird
jssubscriptloader
xpcnativewrappers
cve-2011-3647
nvd
security issue

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.3%

JSON

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.

Related

ubuntucve 2
prion 2
openvas 41
securityvulns 4
veracode 1
mozilla 2
ubuntu 3
nessus 41
suse 6
osv 3
debian 4
oraclelinux 2
redhat 2
centos 1
cve 1
freebsd 2
gentoo 1
ubuntucve
ubuntucve
CVE-2011-3647
2011-11-09 00:00:00
CVE-2011-3004
2011-09-30 00:00:00
prion
prion
Design/Logic Flaw
2011-11-09 11:55:00
Design/Logic Flaw
2011-09-29 00:55:00
openvas
openvas
Mozilla Products Privilege Escalation Vulnerabily (MAC OS X)
2011-11-14 00:00:00
Mozilla Products Privilege Escalation Vulnerability (MFSA2011-46) - Windows
2011-11-11 00:00:00
Mozilla Products Privilege Escalation Vulnerabily (Windows)
2011-11-11 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-46
2011-11-25 00:00:00
Mozilla Foundation Security Advisory 2011-43
2011-10-01 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 01:06:23
mozilla
mozilla
loadSubScript unwraps XPCNativeWrapper scope parameter (1.9.2 branch) — Mozilla
2011-11-08 00:00:00
loadSubScript unwraps XPCNativeWrapper scope parameter — Mozilla
2011-09-27 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2011-12-22 00:00:00
Firefox and Xulrunner vulnerabilities
2011-11-10 00:00:00
Firefox vulnerabilities
2011-09-29 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 : firefox, xulrunner-1.9.2 vulnerabilities (USN-1251-1)
2011-11-11 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1254-1)
2011-12-23 00:00:00
RHEL 6 : thunderbird (RHSA-2011:1439)
2011-11-09 00:00:00
suse
suse
MozillaFirefox (critical)
2011-11-15 15:08:31
Security update for MozillaFirefox (critical)
2011-11-18 22:08:45
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
osv
osv
icedove - several
2011-11-11 00:00:00
iceape - several
2011-11-09 00:00:00
iceweasel - several
2011-11-09 00:00:00
debian
debian
[SECURITY] [DSA 2341-1] iceweasel security update
2011-11-09 17:00:08
[BSA-056] Security update for Iceweasel
2011-11-16 11:46:20
[SECURITY] [DSA 2342-1] iceape security update
2011-11-09 17:27:12
oraclelinux
oraclelinux
firefox security update
2011-11-09 00:00:00
thunderbird security update
2011-11-09 00:00:00
redhat
redhat
(RHSA-2011:1437) Critical: firefox security update
2011-11-08 00:00:00
(RHSA-2011:1439) Critical: thunderbird security update
2011-11-08 00:00:00
centos
centos
firefox, xulrunner security update
2011-11-09 20:48:22
cve
cve
CVE-2011-3004
2011-09-29 00:55:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
Mozilla -- multiple vulnerabilities
2011-09-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.3%

JSON
Related for CVE-2011-3647
ubuntucve2prion2openvas41securityvulns4veracode1mozilla2ubuntu3nessus41suse6osv3debian4oraclelinux2redhat2centos1cve1freebsd2gentoo1