NVD

Id
10254  
Name
CVE-2011-3670  
Description
Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-02-01  
Modified Date
2013-11-15  
Seq
2011-3670  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
58725 10254 CVE-2011-3670 SUSE-SU-2012:0198  View
58726 10254 CVE-2011-3670 SUSE-SU-2012:0221  View
58727 10254 CVE-2011-3670 openSUSE-SU-2012:0234  View
58728 10254 CVE-2011-3670 oval:org.mitre.oval:def:14814  View
58729 10254 CVE-2011-3670 DSA-2400  View
58730 10254 CVE-2011-3670 MDVSA-2012:013  View
58731 10254 CVE-2011-3670 http://www.mozilla.org/security/announce/2012/mfsa2012-02.html  View
58732 10254 CVE-2011-3670 https://bugzilla.mozilla.org/show_bug.cgi?id=504014  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25559 JVNDB-2012-001266 複数の Mozilla 製品における重要な情報を取得される脆弱性 複数の Mozilla 製品には、IPv6 リテラルアドレスの構文を適切に適用しないため、重要な情報を取得される脆弱性が存在します。 CVE-2011-3670 51577 CVE-2011-3670 10254 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001266.html 2012-01-31 2012-02-03 View