Lucene search
Mozilla FoundationMFSA2011-52HistoryNov 08, 2011 - 12:00 a.m.
Code execution via NoWaiverWrapper — Mozilla
2011-11-0800:00:00
Mozilla Foundation
www.mozilla.org
14
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.006 Low
EPSS
Percentile
79.5%
Mozilla security researcher moz_bug_r_a4 reported that an internal privilege check failed to respect the NoWaiverWrappers introduced with Firefox 4. This could result in elevated privilege being granted to web content.
Affected configurations
Node
mozillafirefoxRange<8
ORmozillaseamonkeyRange<2.5
ORmozillathunderbirdRange<8
Related
seebug
seebug
Mozilla Firefox/Thunderbird NoWaiverWrapper权限提升漏洞(CVE-2011-3655)
2011-11-10 00:00:00
prion
prion
Design/Logic Flaw
2011-11-09 11:55:00
openvas
openvas
cve
cve
CVE-2011-3655
2011-11-09 11:55:04
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-52
2011-11-25 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
ubuntucve
ubuntucve
CVE-2011-3655
2011-11-09 00:00:00
nvd
nvd
CVE-2011-3655
2011-11-09 11:55:04
cvelist
cvelist
CVE-2011-3655
2011-11-09 11:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2011-11-23 00:00:00
Mozvoikko and ubufox update
2011-11-23 00:00:00
Thunderbird vulnerabilities
2011-11-28 00:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : thunderbird (multiple_vulnerabilities_in_thunderbird2)
2015-01-19 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:1243-1)
2014-06-13 00:00:00
Ubuntu 11.10 : thunderbird vulnerabilities (USN-1282-1)
2011-11-29 00:00:00
suse
suse
MozillaFirefox secuirty update (critical)
2011-11-15 15:08:39
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
Security update for mozilla-nss (critical)
2011-11-18 22:08:26
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.006 Low
EPSS
Percentile
79.5%
Related for MFSA2011-52