CVE-2011-3001 — Mozilla Seamonkey vulnerability

CWE-2645 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 57.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla SeamonkeyMozilla ThunderbirdMozilla Firefox
Timeline
PublishedSep 29
Latest updateMay 17

Description

Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDmozilla/seamonkey2.3.3+52
▶NVDmozilla/thunderbird6.0.2+97
▶NVDmozilla/firefox4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-445h-22pr-cp5g: Mozilla Firefox 4↗2022-05-17
▶
CVEList
CVE-2011-3001: Mozilla Firefox 4↗2011-09-29
▶

📋Vendor Advisories

2
Ubuntu
Mozvoikko, ubufox, webfav update↗2011-10-04
▶
Ubuntu
Firefox vulnerabilities↗2011-09-29
▶
CVE-2011-3001 — Mozilla Seamonkey vulnerability | cvebase