Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-3004
HistorySep 30, 2011 - 12:00 a.m.

CVE-2011-3004

2011-09-3000:00:00
ubuntu.com
ubuntu.com
7

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.4%

JSON

The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before
2.4 does not properly handle XPCNativeWrappers during calls to the
loadSubScript method in an add-on, which makes it easier for remote
attackers to gain privileges via a crafted web site that leverages certain
unwrapping behavior.

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox< 7.0.1+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN

Related

openvas 18
prion 2
cve 2
securityvulns 2
mozilla 1
ubuntucve 1
nessus 18
ubuntu 3
suse 1
freebsd 1
gentoo 1
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2011-43) - Linux
2021-11-11 00:00:00
Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability
2011-10-04 00:00:00
Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability (MAC OS X)
2011-10-14 00:00:00
prion
prion
Design/Logic Flaw
2011-09-29 00:55:00
Design/Logic Flaw
2011-11-09 11:55:00
cve
cve
CVE-2011-3004
2011-09-29 00:55:00
CVE-2011-3647
2011-11-09 11:55:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-43
2011-10-01 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-10-01 00:00:00
mozilla
mozilla
loadSubScript unwraps XPCNativeWrapper scope parameter — Mozilla
2011-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2011-3647
2011-11-09 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 : firefox, xulrunner-1.9.2 vulnerabilities (USN-1251-1)
2011-11-11 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1254-1)
2011-12-23 00:00:00
Mandriva Linux Security Advisory : mozilla (MDVSA-2011:169)
2011-11-10 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2011-12-22 00:00:00
Firefox and Xulrunner vulnerabilities
2011-11-10 00:00:00
Firefox vulnerabilities
2011-09-29 00:00:00
suse
suse
seamonkey: Update to Mozilla Seamonkey 2.4 (important)
2011-09-29 15:08:19
freebsd
freebsd
Mozilla -- multiple vulnerabilities
2011-09-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.4%

JSON
Related for UB:CVE-2011-3004
openvas18prion2cve2securityvulns2mozilla1ubuntucve1nessus18ubuntu3suse1freebsd1gentoo1