PT-2011-4232 · Mozilla · Firefox+1

Publicado 2011-08-16 · Atualizado 2024-12-12 · CVE-2011-2993

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3

Description The issue concerns the implementation of digital signatures for JAR files, which does not prevent calls from unsigned JavaScript code to signed code. This allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site.

Recommendations For Mozilla Firefox versions 4.x through 5, update to a version that addresses this issue. For SeaMonkey versions 2.x before 2.3, update to version 2.3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2993

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Firefox

Seamonkey

Referências · 2065

• https://suse.com/security/cve/CVE-2023-6856 · Nota
• https://suse.com/security/cve/CVE-2024-4778 · Nota
• https://suse.com/security/cve/CVE-2019-11751 · Nota
• https://suse.com/security/cve/CVE-2017-5441 · Nota
• https://suse.com/security/cve/CVE-2023-6861 · Nota
• https://suse.com/security/cve/CVE-2015-0817 · Nota
• https://suse.com/security/cve/CVE-2021-23965 · Nota
• https://suse.com/security/cve/CVE-2016-9899 · Nota
• https://suse.com/security/cve/CVE-2014-1562 · Nota
• https://suse.com/security/cve/CVE-2015-7176 · Nota
• https://suse.com/security/cve/CVE-2023-32206 · Nota
• https://suse.com/security/cve/CVE-2017-5406 · Nota
• https://suse.com/security/cve/CVE-2016-5272 · Nota
• https://suse.com/security/cve/CVE-2012-3961 · Nota
• https://suse.com/security/cve/CVE-2017-7836 · Nota