NVD

Id
9691  
Name
CVE-2011-2993  
Description
The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-18  
Modified Date
2012-04-24  
Seq
2011-2993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55449 9691 CVE-2011-2993 SUSE-SA:2011:037  View
55450 9691 CVE-2011-2993 oval:org.mitre.oval:def:14055  View
55451 9691 CVE-2011-2993 http://www.mozilla.org/security/announce/2011/mfsa2011-29.html  View
55452 9691 CVE-2011-2993 http://www.mozilla.org/security/announce/2011/mfsa2011-33.html  View
55453 9691 CVE-2011-2993 https://bugzilla.mozilla.org/show_bug.cgi?id=657267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31943 JVNDB-2011-002183 Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 Mozilla Firefox および SeaMonkey の JAR に対するデジタル署名の実装は、未署名の JavaScript コードからの署名済コードの呼び出しを防止しないため、同一生成元ポリシーを回避され、権限を取得される脆弱性が存在します。 CVE-2011-2993 50900 CVE-2011-2993 9691 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002183.html 2011-08-16 2011-09-06 View