Home > Vulnerability Database > CVE-2011-3655

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2011-3655

Date: November 9, 2011

Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.

Severity Score

8.1

Related Resources (8)

Url: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14202

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-3655

Url: http://www.mozilla.org/security/announce/2011/mfsa2011-52.html

Url: http://secunia.com/advisories/49055

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=672182

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-3655

Url: https://www.mend.io/vulnerability-database/CVE-2011-3655

Severity Score

8.1

Weakness Type (CWE)

Code Injection

CWE-94

CVSS v3.1

Base Score:	8.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us