Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2486
HistoryNov 19, 2012 - 12:00 a.m.

CVE-2011-2486

2012-11-1900:00:00
ubuntu.com
ubuntu.com
9

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.01

Percentile

83.5%

nspluginwrapper before 1.4.4 does not properly provide access to
NPNVprivateModeBool variable settings, which could prevent Firefox plugins
from determining if they should run in Private Browsing mode and allow
remote attackers to bypass intended access restrictions, as demonstrated
using Flash.

Bugs

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.01

Percentile

83.5%