SUSE CVE-2011-3004

The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping...

SUSE CVE-2011-3647

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5429)

Mozilla Firefox has been updated to version 1.9.2.24 bnc728520 to fix the following security issues : - bmo680880 loadSubScript unwraps XPCNativeWrapper scope parameter. MFSA 2011-46 / CVE-2011-3647 - bmo690225 Potential XSS against sites using Shift-JIS. MFSA 2011-47 / CVE-2011-3648 - bmo674776...

Mozilla Foundation Security Advisory 2011-46

Mozilla Foundation Security Advisory 2011-46 Title: loadSubScript unwraps XPCNativeWrapper scope parameter 1.9.2 branch Impact: Critical Announced: November 8, 2011 Reporter: mozbugra4 Products: Firefox, Thunderbird Fixed in: Firefox 3.6.24 Thunderbird 3.1.16 Description Mozilla security research...

CVE-2011-3647

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

Mozilla: Security problem with loadSubScript on 1.9.2 branch (MFSA 2011-46)

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

Mozilla: Security problem with loadSubScript on 1.9.2 branch (MFSA 2011-46)

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

loadSubScript unwraps XPCNativeWrapper scope parameter (1.9.2 branch) — Mozilla

Mozilla security researcher mozbugra4 reported that the problem described in MFSA 2011-43 and fixed in Firefox 7 also affected Firefox 3.6: a malicious page could potentially exploit a Firefox user who had installed an add-on that used loadSubscript in vulnerable ways...

PT-2011-4558

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.24 Thunderbird versions prior to 3.1.6 Description The issue arises from the JSSubScriptLoader in Mozilla Firefox and Thunderbird, which does not properly handle XPCNativeWrappers during calls to the...

Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/seamonkey and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsloadsubscriptsecbypassvulnmacosx.nasl 7052 2017-09-04 11:50:51Z teissa $ Mozilla Firefox and SeaMonkey 'loadSubScript' Security Bypass Vulnerability MA...

Mozilla Foundation Security Advisory 2011-43

Mozilla Foundation Security Advisory 2011-43 Title: loadSubScript unwraps XPCNativeWrapper scope parameter Impact: Critical Announced: September 27, 2011 Reporter: David Rees Products: Firefox, SeaMonkey Fixed in: Firefox 7.0 SeaMonkey 2.4 Description David Rees reported that the JSSubScriptLoade...

CVE-2011-3004

The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping...

PT-2011-4242

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 6 SeaMonkey versions prior to 2.4 Description The issue arises from the JSSubScriptLoader not properly handling XPCNativeWrappers during calls to the loadSubScript method in an add-on. This makes it easier...