Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2011-0067

Published: 07/05/2011 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Mozilla

Vulnerability Summary

Mozilla Firefox prior to 3.5.19 and 3.6.x prior to 3.6.17, and SeaMonkey prior to 2.0.14, does not properly implement autocompletion for forms, which allows remote malicious users to read form history entries via a Java applet that spoofs interaction with the autocomplete controls.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 3.6

mozilla firefox 3.6.8

mozilla firefox 3.6.15

mozilla firefox 3.6.16

mozilla firefox 3.6.6

mozilla firefox 3.6.7

mozilla firefox 3.6.13

mozilla firefox 3.6.14

mozilla firefox 3.6.2

mozilla firefox 3.6.10

mozilla firefox 3.6.9

mozilla firefox 3.6.3

mozilla firefox 3.6.4

mozilla firefox 3.6.11

mozilla firefox 3.6.12

mozilla seamonkey 1.0.6

mozilla seamonkey 1.0.7

mozilla seamonkey 1.0

mozilla seamonkey 1.1.11

mozilla seamonkey 1.1.19

mozilla seamonkey 1.1.2

mozilla seamonkey 1.1.9

mozilla seamonkey 1.0.4

mozilla seamonkey 1.0.5

mozilla seamonkey 1.1.10

mozilla seamonkey 1.1.16

mozilla seamonkey 1.1.17

mozilla seamonkey 1.1.18

mozilla seamonkey 1.1.7

mozilla seamonkey 1.1.8

mozilla seamonkey 2.0

mozilla seamonkey 2.0.1

mozilla seamonkey 2.0.10

mozilla seamonkey 2.0.11

mozilla seamonkey 1.0.1

mozilla seamonkey 1.0.8

mozilla seamonkey 1.0.9

mozilla seamonkey 1.1.12

mozilla seamonkey 1.1.13

mozilla seamonkey 1.1.3

mozilla seamonkey 1.1.4

mozilla seamonkey 1.1

mozilla seamonkey 1.5.0.10

mozilla seamonkey 2.0.4

mozilla seamonkey 2.0.6

mozilla seamonkey 2.0.7

mozilla seamonkey 2.0.2

mozilla seamonkey 2.0.3

mozilla seamonkey 2.0.5

mozilla seamonkey 2.0.12

mozilla seamonkey

mozilla seamonkey 1.0.2

mozilla seamonkey 1.0.3

mozilla seamonkey 1.1.1

mozilla seamonkey 1.1.14

mozilla seamonkey 1.1.15

mozilla seamonkey 1.1.5

mozilla seamonkey 1.1.6

mozilla seamonkey 1.5.0.8

mozilla seamonkey 1.5.0.9

mozilla seamonkey 2.0.8

mozilla seamonkey 2.0.9

mozilla firefox 3.5.4

mozilla firefox 3.5.5

mozilla firefox 3.0.16

mozilla firefox 3.0.15

mozilla firefox 3.0.8

mozilla firefox 3.0.7

mozilla firefox 3.0

mozilla firefox 2.0.0.14

mozilla firefox 2.0.0.16

mozilla firefox 3.5.1

mozilla firefox 3.5.10

mozilla firefox 3.5.9

mozilla firefox 3.0.12

mozilla firefox 3.0.11

mozilla firefox 3.0.4

mozilla firefox 3.0.3

mozilla firefox 2.0.0.20

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.7

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 1.5

mozilla firefox 1.5.0.10

mozilla firefox 1.5.0.6

mozilla firefox 1.5.0.7

mozilla firefox 1.0

mozilla firefox 1.0.3

mozilla firefox 3.5.11

mozilla firefox 3.5.12

mozilla firefox 2.0.0.11

mozilla firefox 2.0.0.5

mozilla firefox 2.0.0.4

mozilla firefox 1.5.0.2

mozilla firefox 1.5.0.3

mozilla firefox 1.5.1

mozilla firefox 1.5.2

mozilla firefox 1.5.7

mozilla firefox 1.5.6

mozilla firefox 1.0.4

mozilla firefox 1.0.7

mozilla firefox 1.0.6

mozilla firefox 3.5.15

mozilla firefox 3.5.16

mozilla firefox 3.5.6

mozilla firefox 3.5.7

mozilla firefox 3.0.14

mozilla firefox 3.0.13

mozilla firefox 3.0.6

mozilla firefox 3.0.5

mozilla firefox 2.0.0.12

mozilla firefox 2.0.0.19

mozilla firefox 2.0.0.15

mozilla firefox 2.0.0.13

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.2

mozilla firefox 1.5.0.11

mozilla firefox 1.5.0.12

mozilla firefox 1.5.0.1

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.9

mozilla firefox 1.5.5

mozilla firefox 1.0.1

mozilla firefox 1.0.8

mozilla firefox 3.5.17

mozilla firefox

mozilla firefox 3.5.2

mozilla firefox 3.5.3

mozilla firefox 3.5.8

mozilla firefox 3.5

mozilla firefox 3.0.17

mozilla firefox 3.0.10

mozilla firefox 3.0.9

mozilla firefox 3.0.2

mozilla firefox 3.0.1

mozilla firefox 2.0.0.17

mozilla firefox 2.0.0.10

mozilla firefox 2.0.0.18

mozilla firefox 2.0.0.6

mozilla firefox 1.5.0.4

mozilla firefox 1.5.0.5

mozilla firefox 1.5.3

mozilla firefox 1.5.4

mozilla firefox 1.5.8

mozilla firefox 1.0.2

mozilla firefox 1.0.5

mozilla firefox 3.5.13

mozilla firefox 3.5.14

Vendor Advisories

Debian Security Advisories: DSA-2228-1 iceweasel -- several vulnerabilities
Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox: CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 Scoobidiver, Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo, Mats Palmgren, Jesse Ruderman, Aki Kelin and Martin Barbella disc ...
Debian Security Advisories: DSA-2235-1 icedove -- several vulnerabilities
Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 Scoobidiver, Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo, Ma ...
Ubuntu Security Notice: firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.2 vulnerabilities
Multiple vulnerabilities in Firefox and Xulrunner ...
Ubuntu Security Notice: Multiple Xulrunner 1.9.1 vulnerabilities
Multiple xulrunner-191 vulnerabilities ...
Ubuntu Security Notice: thunderbird regression
An empty menu bar sometimes appeared after upgrade in USN-1122-2 ...
Ubuntu Security Notice: thunderbird vulnerabilities
Thunderbird could be made to run programs as your login if it opened specially crafted mail ...
Ubuntu Security Notice: thunderbird vulnerabilities
Thunderbird could be made to run programs as your login if it opened specially crafted mail ...
Mozilla: Information stealing via form history
Mozilla Foundation Security Advisory 2011-14 Information stealing via form history Announced April 28, 2011 Reporter Paul Stone Impact Moderate Products Firefox, SeaMonkey Fixed in ...

References

CWE-20https://bugzilla.mozilla.org/show_bug.cgi?id=527935http://www.mozilla.org/security/announce/2011/mfsa2011-14.htmlhttp://www.debian.org/security/2011/dsa-2235http://www.debian.org/security/2011/dsa-2227http://www.debian.org/security/2011/dsa-2228http://www.mandriva.com/security/advisories?name=MDVSA-2011:079http://downloads.avaya.com/css/P8/documents/100144158https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14523https://nvd.nist.govhttps://www.debian.org/security/./dsa-2228https://usn.ubuntu.com/1112-1/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook