Security Advisory

CVE-2011-3647

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-11-09 11:00:00

Last updated 2024-08-06 23:37:48

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.

← Browse all CVEs View on cve.org ↗