CVE-2011-3670 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2011-3670

Modified

More Info Official Page

Source-cve@mitre.org

Published At-01 Feb, 2012 | 16:55

Updated At-29 Apr, 2026 | 01:13

Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Mozilla Corporation

>>firefox>>Versions up to 3.6.25(inclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.1

cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.2

cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.3

cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.4

cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.5

cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.6

cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.6.1

cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.7

cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.7.1

cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.8

cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.9

cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.9

cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.9.1

cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.9.2

cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.9.3

cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.10

cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>0.10.1

cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0

cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0

cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.1

cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.2

cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.3

cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.4

cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.5

cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.6

cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.7

cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.0.8

cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.4.1

cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5

cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5

cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5

cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.1

cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.2

cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.3

cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.4

cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.5

cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.6

cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.7

cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.8

cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.9

cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.10

cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.11

cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.0.12

cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.1

cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.2

cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.3

cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.4

cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.5

cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>1.5.6

cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html	cve@mitre.org	N/A
http://www.debian.org/security/2012/dsa-2400	cve@mitre.org	N/A
http://www.debian.org/security/2012/dsa-2402	cve@mitre.org	N/A
http://www.debian.org/security/2012/dsa-2406	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:013	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-02.html	cve@mitre.org	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=504014	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14814	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2012/dsa-2400	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2012/dsa-2402	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2012/dsa-2406	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:013	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-02.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=504014	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14814	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2012/dsa-2400

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2012/dsa-2402

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2012/dsa-2406

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:013

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-02.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=504014

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14814

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.debian.org/security/2012/dsa-2400

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.debian.org/security/2012/dsa-2402

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.debian.org/security/2012/dsa-2406

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:013

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=504014

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14814

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A