Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2983
HistoryAug 19, 2011 - 12:00 a.m.

CVE-2011-2983

2011-08-1900:00:00
ubuntu.com
ubuntu.com
18

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

71.8%

Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12,
SeaMonkey 1.x and 2.x, and possibly other products does not properly handle
the RegExp.input property, which allows remote attackers to bypass the Same
Origin Policy and read data from a different domain via a crafted web site,
possibly related to a use-after-free.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox<ย 3.6.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchfirefox<ย 3.6.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu10.04noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2<ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2<ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

71.8%