NVD

Id
9164  
Name
CVE-2011-2372  
Description
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-09-28  
Modified Date
2012-01-26  
Seq
2011-2372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52339 9164 CVE-2011-2372 SUSE-SU-2011:1256  View
52340 9164 CVE-2011-2372 openSUSE-SU-2011:1076  View
52341 9164 CVE-2011-2372 oval:org.mitre.oval:def:13854  View
52342 9164 CVE-2011-2372 DSA-2312  View
52343 9164 CVE-2011-2372 DSA-2313  View
52344 9164 CVE-2011-2372 DSA-2317  View
52345 9164 CVE-2011-2372 MDVSA-2011:139  View
52346 9164 CVE-2011-2372 MDVSA-2011:140  View
52347 9164 CVE-2011-2372 MDVSA-2011:141  View
52348 9164 CVE-2011-2372 MDVSA-2011:142  View
52349 9164 CVE-2011-2372 http://www.mozilla.org/security/announce/2011/mfsa2011-40.html  View
52350 9164 CVE-2011-2372 RHSA-2011:1341  View
52351 9164 CVE-2011-2372 https://bugzilla.mozilla.org/show_bug.cgi?id=657462  View
52352 9164 CVE-2011-2372 https://bugzilla.mozilla.org/show_bug.cgi?id=662309  View
52353 9164 CVE-2011-2372 https://bugzilla.mozilla.org/show_bug.cgi?id=663899  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32072 JVNDB-2011-002312 複数の Mozilla 製品におけるアクセス制限を回避される脆弱性 複数の Mozilla 製品は、Enter キーの押し続けに応答したダウンロードの開始を制限しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2011-2372 50279 CVE-2011-2372 9164 3.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002312.html 2011-09-27 2012-04-16 View