CVE-2011-2981

Firefox < 3.6.20 - Remote Code Execution via Event Management Context Bypass

Title source: llm
STIX 2.1

Description

The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.

References (12)

Core 12
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:127
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2297
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=650252
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2296
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1164.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14512
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=614151
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2295
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=643450

Scores

EPSS 0.0224
EPSS Percentile 80.9%

Details

CWE
CWE-16
Status published
Products (47)
mozilla/firefox 1.0 (2 CPE variants)
mozilla/firefox 1.0.1
mozilla/firefox 1.0.2
mozilla/firefox 1.0.3
mozilla/firefox 1.0.4
mozilla/firefox 1.0.5
mozilla/firefox 1.0.6
mozilla/firefox 1.0.7
mozilla/firefox 1.0.8
mozilla/firefox 1.5 (3 CPE variants)
... and 37 more
Published Aug 18, 2011
Tracked Since Feb 18, 2026