Lucene search
HistoryNov 09, 2011 - 11:55 a.m.
CVE-2011-3655
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.5%
Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
Affected configurations
Node
mozillafirefoxMatch4.0
ORmozillafirefoxMatch4.0beta1
ORmozillafirefoxMatch4.0beta10
ORmozillafirefoxMatch4.0beta11
ORmozillafirefoxMatch4.0beta12
ORmozillafirefoxMatch4.0beta2
ORmozillafirefoxMatch4.0beta3
ORmozillafirefoxMatch4.0beta4
ORmozillafirefoxMatch4.0beta5
ORmozillafirefoxMatch4.0beta6
ORmozillafirefoxMatch4.0beta7
ORmozillafirefoxMatch4.0beta8
ORmozillafirefoxMatch4.0beta9
ORmozillafirefoxMatch4.0.1
ORmozillafirefoxMatch5.0
ORmozillafirefoxMatch5.0.1
ORmozillafirefoxMatch6.0
ORmozillafirefoxMatch6.0.1
ORmozillafirefoxMatch6.0.2
ORmozillafirefoxMatch7.0
Node
mozillathunderbirdMatch5.0
ORmozillathunderbirdMatch6.0
ORmozillathunderbirdMatch6.0.1
ORmozillathunderbirdMatch6.0.2
ORmozillathunderbirdMatch7.0
Related
prion
prion
Design/Logic Flaw
2011-11-09 11:55:00
seebug
seebug
Mozilla Firefox/Thunderbird NoWaiverWrapperζιζεζΌζ΄(CVE-2011-3655)
2011-11-10 00:00:00
ubuntucve
ubuntucve
CVE-2011-3655
2011-11-09 00:00:00
openvas
openvas
cve
cve
CVE-2011-3655
2011-11-09 11:55:04
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-52
2011-11-25 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
mozilla
mozilla
Code execution via NoWaiverWrapper β Mozilla
2011-11-08 00:00:00
cvelist
cvelist
CVE-2011-3655
2011-11-09 11:00:00
ubuntu
ubuntu
Mozvoikko and ubufox update
2011-11-23 00:00:00
Firefox vulnerabilities
2011-11-23 00:00:00
Thunderbird vulnerabilities
2011-11-28 00:00:00
nessus
nessus
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:1243-1)
2014-06-13 00:00:00
Oracle Solaris Third-Party Patch Update : thunderbird (multiple_vulnerabilities_in_thunderbird2)
2015-01-19 00:00:00
Ubuntu 11.04 / 11.10 : mozvoikko, ubufox update (USN-1277-2)
2011-11-26 00:00:00
suse
suse
MozillaFirefox secuirty update (critical)
2011-11-15 15:08:39
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
Security update for mozilla-nss (critical)
2011-11-18 22:08:26
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.5%
Related for NVD:CVE-2011-3655