Beveiligingsadvies

CVE-2011-3647

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-11-09 11:00:00

Laatst bijgewerkt 2024-08-06 23:37:48

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.

← Alle CVE's bekijken Bekijk op cve.org ↗