NVD

Id
9679  
Name
CVE-2011-2981  
Description
The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-18  
Modified Date
2012-06-15  
Seq
2011-2981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55333 9679 CVE-2011-2981 SUSE-SA:2011:037  View
55334 9679 CVE-2011-2981 SUSE-SU-2011:0967  View
55335 9679 CVE-2011-2981 oval:org.mitre.oval:def:14512  View
55336 9679 CVE-2011-2981 DSA-2295  View
55337 9679 CVE-2011-2981 DSA-2296  View
55338 9679 CVE-2011-2981 DSA-2297  View
55339 9679 CVE-2011-2981 MDVSA-2011:127  View
55340 9679 CVE-2011-2981 http://www.mozilla.org/security/announce/2011/mfsa2011-30.html  View
55341 9679 CVE-2011-2981 RHSA-2011:1164  View
55342 9679 CVE-2011-2981 https://bugzilla.mozilla.org/show_bug.cgi?id=614151  View
55343 9679 CVE-2011-2981 https://bugzilla.mozilla.org/show_bug.cgi?id=643450  View
55344 9679 CVE-2011-2981 https://bugzilla.mozilla.org/show_bug.cgi?id=650252  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31949 JVNDB-2011-002189 複数の Mozilla 製品のイベント管理実装における同一生成元ポリシーを回避される脆弱性 複数の Mozilla 製品のイベント管理実装は、スクリプトを実行するためのコンテキストを適切に選択しないため、同一生成元ポリシーを回避される、またはクローム特権を持った任意の JavaScript を実行される脆弱性が存在します。 CVE-2011-2981 50888 CVE-2011-2981 9679 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002189.html 2011-08-16 2011-09-07 View