Published: 09/11/2011 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Mozilla Firefox 4.x up to and including 7.0 and Thunderbird 5.0 up to and including 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote malicious users to gain privileges via a crafted web site.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 4.0.1
mozilla firefox 4.0
mozilla firefox 5.0
mozilla firefox 5.0.1
mozilla firefox 6.0
mozilla firefox 6.0.2
mozilla firefox 6.0.1
mozilla firefox 7.0
mozilla thunderbird 5.0
mozilla thunderbird 6.0
mozilla thunderbird 6.0.1
mozilla thunderbird 6.0.2
mozilla thunderbird 7.0

Multiple vulnerabilities have been fixed in Thunderbird ...

Multiple vulnerabilities have been fixed in Firefox ...

This update provides packages compatible with Firefox 8 ...

Mozilla Foundation Security Advisory 2011-52 Code execution via NoWaiverWrapper Announced November 8, 2011 Reporter moz_bug_r_a4 Impact Critical Products Firefox, SeaMonkey, Thunderbird Fixed in ...

CWE-94 https://bugzilla.mozilla.org/show_bug.cgi?id=672182 http://www.mozilla.org/security/announce/2011/mfsa2011-52.html http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html http://secunia.com/advisories/49055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14202 https://nvd.nist.gov https://usn.ubuntu.com/1282-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-3655

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect