CVE Vulnerabilities

CVE-2011-3001

Published: Sep 29, 2011 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 5.0 5.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 6.0 6.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0 4.0
Firefox Mozilla 4.0.1 4.0.1

References