ByteOS Network

NVD Vulnerability Details :

CVE-2011-2981

Deferred

Source-cve@mitre.org

Published At-18 Aug, 2011 | 18:55

Updated At-11 Apr, 2025 | 00:51

The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html	cve@mitre.org	N/A
http://www.debian.org/security/2011/dsa-2295	cve@mitre.org	N/A
http://www.debian.org/security/2011/dsa-2296	cve@mitre.org	N/A
http://www.debian.org/security/2011/dsa-2297	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:127	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2011/mfsa2011-30.html	cve@mitre.org	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-1164.html	cve@mitre.org	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=614151	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=643450	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=650252	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14512	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2011/dsa-2295	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2011/dsa-2296	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2011/dsa-2297	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:127	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2011/mfsa2011-30.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-1164.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=614151	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=643450	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=650252	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14512	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History