Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-3004
HistorySep 30, 2011 - 12:00 a.m.

CVE-2011-3004

2011-09-3000:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

69.7%

JSON

The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before
2.4 does not properly handle XPCNativeWrappers during calls to the
loadSubScript method in an add-on, which makes it easier for remote
attackers to gain privileges via a crafted web site that leverages certain
unwrapping behavior.

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox< 7.0.1+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN

Related

nvd 2
openvas 18
securityvulns 2
cvelist 2
mozilla 1
prion 2
cve 2
ubuntucve 1
nessus 18
ubuntu 3
suse 1
freebsd 1
gentoo 1
nvd
nvd
CVE-2011-3004
2011-09-29 00:55:01
CVE-2011-3647
2011-11-09 11:55:03
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2011-43) - Linux
2021-11-11 00:00:00
Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability
2011-10-04 00:00:00
Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability - Mac OS X
2011-10-14 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-43
2011-10-01 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-10-01 00:00:00
cvelist
cvelist
CVE-2011-3004
2011-09-29 00:00:00
CVE-2011-3647
2011-11-09 11:00:00
mozilla
mozilla
loadSubScript unwraps XPCNativeWrapper scope parameter — Mozilla
2011-09-27 00:00:00
prion
prion
Design/Logic Flaw
2011-09-29 00:55:00
Design/Logic Flaw
2011-11-09 11:55:00
cve
cve
CVE-2011-3004
2011-09-29 00:55:01
CVE-2011-3647
2011-11-09 11:55:03
ubuntucve
ubuntucve
CVE-2011-3647
2011-11-09 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 : firefox, xulrunner-1.9.2 vulnerabilities (USN-1251-1)
2011-11-11 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1254-1)
2011-12-23 00:00:00
Mozilla Firefox 6.0 Multiple Vulnerabilities
2011-09-29 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2011-11-10 00:00:00
Thunderbird vulnerabilities
2011-12-22 00:00:00
Firefox vulnerabilities
2011-09-29 00:00:00
suse
suse
seamonkey: Update to Mozilla Seamonkey 2.4 (important)
2011-09-29 15:08:19
freebsd
freebsd
Mozilla -- multiple vulnerabilities
2011-09-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

69.7%

JSON
Related for UB:CVE-2011-3004
nvd2openvas18securityvulns2cvelist2mozilla1prion2cve2ubuntucve1nessus18ubuntu3suse1freebsd1gentoo1