Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2984
HistoryAug 19, 2011 - 12:00 a.m.

CVE-2011-2984

2011-08-1900:00:00
ubuntu.com
ubuntu.com
12

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

88.3%

Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before
3.1.12, and possibly other products does not properly handle the dropping
of a tab element, which allows remote attackers to execute arbitrary
JavaScript code with chrome privileges by establishing a content area and
registering for drop events.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox<ย 3.6.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchfirefox<ย 3.6.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu10.04noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2<ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2<ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchxulrunner-1.9.2<ย 1.9.2.27+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

88.3%