CVE-2011-2981 in Firefox
요약
\~에 의해 MITRE
The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.