CVE-2011-3001 in Firefox

Resumen (Inglés)

Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2011-08-01

Divulgación

2011-09-28

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
58776	Mozilla Firefox Access Restriction escalada de privilegios	264	No está definido	No está definido	CVE-2011-3001

Fuentes

• MITRE
• NVD
• CVE Details