5
CVSSv2

CVE-2011-2370

Published: 30/06/2011 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Mozilla Firefox prior to 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote malicious users to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 3.5.1

mozilla firefox 3.5.10

mozilla firefox 3.5.9

mozilla firefox 3.5.2

mozilla firefox 3.5.3

mozilla firefox 3.5.8

mozilla firefox 3.5

mozilla firefox 3.0.10

mozilla firefox 3.0.9

mozilla firefox 3.0.2

mozilla firefox 3.0.1

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.17

mozilla firefox 2.0.0.18

mozilla firefox 2.0.0.6

mozilla firefox 1.5.0.4

mozilla firefox 1.5.0.5

mozilla firefox 1.5.0.10

mozilla firefox 1.5.3

mozilla firefox 1.5

mozilla firefox 1.5.8

mozilla firefox 1.0.2

mozilla firefox 1.0.5

mozilla firefox 3.5.12

mozilla firefox 3.5.13

mozilla firefox 3.6.2

mozilla firefox 3.6.8

mozilla firefox 3.6.13

mozilla firefox 3.5.18

mozilla firefox 4.0

mozilla firefox 3.0.13

mozilla firefox 3.0.12

mozilla firefox 3.0.11

mozilla firefox 3.0.4

mozilla firefox 3.0.3

mozilla firefox 2.0.0.20

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.7

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 1.5.0.1

mozilla firefox 1.5.0.6

mozilla firefox 1.5.0.7

mozilla firefox 1.0

mozilla firefox 1.0.3

mozilla firefox 3.5.11

mozilla firefox 3.6

mozilla firefox 3.6.12

mozilla firefox 3.6.10

mozilla firefox 3.6.9

mozilla firefox 3.6.17

mozilla firefox

mozilla firefox 3.5.4

mozilla firefox 3.5.5

mozilla firefox 3.0.17

mozilla firefox 3.0.16

mozilla firefox 3.0.8

mozilla firefox 3.0.7

mozilla firefox 3.0

mozilla firefox 2.0.0.14

mozilla firefox 2.0.0.10

mozilla firefox 2.0.0.16

mozilla firefox 2.0.0.5

mozilla firefox 2.0.0.4

mozilla firefox 1.5.0.2

mozilla firefox 1.5.0.3

mozilla firefox 1.5.4

mozilla firefox 1.5.1

mozilla firefox 1.5.2

mozilla firefox 1.5.7

mozilla firefox 1.5.6

mozilla firefox 1.0.4

mozilla firefox 1.0.7

mozilla firefox 3.5.14

mozilla firefox 3.5.15

mozilla firefox 3.5.16

mozilla firefox 3.6.6

mozilla firefox 3.6.7

mozilla firefox 3.5.19

mozilla firefox 3.6.14

mozilla firefox 3.5.6

mozilla firefox 3.5.7

mozilla firefox 3.0.15

mozilla firefox 3.0.14

mozilla firefox 3.0.6

mozilla firefox 3.0.5

mozilla firefox 2.0.0.12

mozilla firefox 2.0.0.19

mozilla firefox 2.0.0.11

mozilla firefox 2.0.0.15

mozilla firefox 2.0.0.13

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.2

mozilla firefox 1.5.0.11

mozilla firefox 1.5.0.12

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.9

mozilla firefox 1.5.5

mozilla firefox 1.0.1

mozilla firefox 1.0.6

mozilla firefox 1.0.8

mozilla firefox 3.5.17

mozilla firefox 3.6.4

mozilla firefox 3.6.3

mozilla firefox 3.6.11

mozilla firefox 3.6.15

mozilla firefox 3.6.16

Vendor Advisories

Multiple Firefox vulnerabilities have been fixed ...
Under certain circumstances, the updated translations could unintentionally install firefox ...
This update provides provides packages compatible with Firefox 5 ...
Mozilla Foundation Security Advisory 2011-28 Non-whitelisted site can trigger xpinstall Announced June 21, 2011 Reporter moz_bug_r_a4 Impact Low Products Firefox, SeaMonkey Fixed in ...