CVE-2011-3001 in Firefox
Summary
Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
08/01/2011
Disclosure
09/28/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 58776 | Mozilla Firefox Access Restriction access control | 264 | Not defined | Not defined | CVE-2011-3001 |