CVE-2011-2993 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2011-2993

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-18 Aug, 2011 | 18:55

Updated At-11 Apr, 2025 | 00:51

The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0.1

cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>5.0

cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.1

cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.2

cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.3

cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.4

cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.5

cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.6

cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.7

cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.8

cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.9

cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.10

cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.11

cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2011/mfsa2011-29.html	cve@mitre.org	Vendor Advisory
http://www.mozilla.org/security/announce/2011/mfsa2011-33.html	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=657267	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14055	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2011/mfsa2011-29.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.mozilla.org/security/announce/2011/mfsa2011-33.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=657267	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14055	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2011/mfsa2011-29.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.mozilla.org/security/announce/2011/mfsa2011-33.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=657267

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14055

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2011/mfsa2011-29.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.mozilla.org/security/announce/2011/mfsa2011-33.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=657267

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14055

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A