CVE-2011-3655

N/A Unknown

Published: November 09, 2011 Modified: April 29, 2026

Description

Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html

Source: cve@mitre.org

http://secunia.com/advisories/49055

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2011/mfsa2011-52.html

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=672182

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14202

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html