Security Advisory

CVE-2011-2993

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-08-18 18:00:00

Last updated 2024-08-06 23:22:26

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.

← Browse all CVEs View on cve.org ↗