Lucene search
Mozilla FoundationMFSA2011-52HistoryNov 08, 2011 - 12:00 a.m.
Code execution via NoWaiverWrapper — Mozilla
2011-11-0800:00:00
Mozilla Foundation
www.mozilla.org
23
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.006
Percentile
79.5%
Mozilla security researcher moz_bug_r_a4 reported that an internal privilege check failed to respect the NoWaiverWrappers introduced with Firefox 4. This could result in elevated privilege being granted to web content.
Affected configurations
Node
mozillafirefoxRange<8
ORmozillaseamonkeyRange<2.5
ORmozillathunderbirdRange<8
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-52
2011-11-25 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
cve
cve
CVE-2011-3655
2011-11-09 11:55:04
ubuntucve
ubuntucve
CVE-2011-3655
2011-11-09 00:00:00
nvd
nvd
CVE-2011-3655
2011-11-09 11:55:04
prion
prion
Design/Logic Flaw
2011-11-09 11:55:00
seebug
seebug
Mozilla Firefox/Thunderbird NoWaiverWrapper权限提升漏洞(CVE-2011-3655)
2011-11-10 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2011-52) - Linux
2021-11-11 00:00:00
cvelist
cvelist
CVE-2011-3655
2011-11-09 11:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2011-11-28 00:00:00
Mozvoikko and ubufox update
2011-11-23 00:00:00
Firefox vulnerabilities
2011-11-23 00:00:00
nessus
nessus
openSUSE Security Update : seamonkey (openSUSE-2011-34)
2014-06-13 00:00:00
Ubuntu 11.04 / 11.10 : mozvoikko, ubufox update (USN-1277-2)
2011-11-26 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:1243-1)
2014-06-13 00:00:00
suse
suse
MozillaFirefox secuirty update (critical)
2011-11-15 15:08:39
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
Security update for mozilla-nss (critical)
2011-11-18 22:08:26
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.006
Percentile
79.5%
Related for MFSA2011-52