CVE

Id
50916  
CVE No.
CVE-2011-3004  
Status
Candidate  
Description
The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior.  
Phase
Assigned (20110801)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
549436 50916 CVE-2011-3004 CONFIRM:http://www.mozilla.org/security/announce/2011/mfsa2011-43.html  View
549437 50916 CVE-2011-3004 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=653926  View
549438 50916 CVE-2011-3004 MANDRIVA:MDVSA-2011:141  View
549439 50916 CVE-2011-3004 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:141  View
549440 50916 CVE-2011-3004 OVAL:oval:org.mitre.oval:def:14121  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34604 JVNDB-2011-004846 Ruby における乱数の値を推測される脆弱性 Ruby は、fork 中の random seed をリセットしないため、乱数の値を推測される脆弱性が存在します。 CVE-2011-3009 50916 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004846.html  View