Description (CNA)
Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14202
- http://www.mozilla.org/security/announce/2011/mfsa2011-52.html
- http://secunia.com/advisories/49055
- https://bugzilla.mozilla.org/show_bug.cgi?id=672182
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html
ADP enrichment
No English description supplied.
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14202
- http://www.mozilla.org/security/announce/2011/mfsa2011-52.html
- http://secunia.com/advisories/49055
- https://bugzilla.mozilla.org/show_bug.cgi?id=672182
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html