6.8

CVE-2011-0051

Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as demonstrated by a question about granting privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 3.6
Mozilla ≫ Firefox Version 3.6.2
Mozilla ≫ Firefox Version 3.6.3
Mozilla ≫ Firefox Version 3.6.4
Mozilla ≫ Firefox Version 3.6.6
Mozilla ≫ Firefox Version 3.6.7
Mozilla ≫ Firefox Version 3.6.8
Mozilla ≫ Firefox Version 3.6.9
Mozilla ≫ Firefox Version 3.6.10
Mozilla ≫ Firefox Version 3.6.11
Mozilla ≫ Firefox Version 3.6.12
Mozilla ≫ Firefox Version 3.6.13
Mozilla ≫ Seamonkey Version <= 2.0.11
Mozilla ≫ Seamonkey Version 1.0
Mozilla ≫ Seamonkey Version 1.0 Update alpha
Mozilla ≫ Seamonkey Version 1.0 Update beta
Mozilla ≫ Seamonkey Version 1.0.1
Mozilla ≫ Seamonkey Version 1.0.2
Mozilla ≫ Seamonkey Version 1.0.3
Mozilla ≫ Seamonkey Version 1.0.4
Mozilla ≫ Seamonkey Version 1.0.5
Mozilla ≫ Seamonkey Version 1.0.6
Mozilla ≫ Seamonkey Version 1.0.7
Mozilla ≫ Seamonkey Version 1.0.8
Mozilla ≫ Seamonkey Version 1.0.9
Mozilla ≫ Seamonkey Version 1.1
Mozilla ≫ Seamonkey Version 1.1 Update alpha
Mozilla ≫ Seamonkey Version 1.1 Update beta
Mozilla ≫ Seamonkey Version 1.1.1
Mozilla ≫ Seamonkey Version 1.1.2
Mozilla ≫ Seamonkey Version 1.1.3
Mozilla ≫ Seamonkey Version 1.1.4
Mozilla ≫ Seamonkey Version 1.1.5
Mozilla ≫ Seamonkey Version 1.1.6
Mozilla ≫ Seamonkey Version 1.1.7
Mozilla ≫ Seamonkey Version 1.1.8
Mozilla ≫ Seamonkey Version 1.1.9
Mozilla ≫ Seamonkey Version 1.1.10
Mozilla ≫ Seamonkey Version 1.1.11
Mozilla ≫ Seamonkey Version 1.1.12
Mozilla ≫ Seamonkey Version 1.1.13
Mozilla ≫ Seamonkey Version 1.1.14
Mozilla ≫ Seamonkey Version 1.1.15
Mozilla ≫ Seamonkey Version 1.1.16
Mozilla ≫ Seamonkey Version 1.1.17
Mozilla ≫ Seamonkey Version 1.1.18
Mozilla ≫ Seamonkey Version 1.1.19
Mozilla ≫ Seamonkey Version 1.5.0.8
Mozilla ≫ Seamonkey Version 1.5.0.9
Mozilla ≫ Seamonkey Version 1.5.0.10
Mozilla ≫ Seamonkey Version 2.0
Mozilla ≫ Seamonkey Version 2.0 Update alpha_1
Mozilla ≫ Seamonkey Version 2.0 Update alpha_2
Mozilla ≫ Seamonkey Version 2.0 Update alpha_3
Mozilla ≫ Seamonkey Version 2.0 Update beta_1
Mozilla ≫ Seamonkey Version 2.0 Update beta_2
Mozilla ≫ Seamonkey Version 2.0 Update rc1
Mozilla ≫ Seamonkey Version 2.0 Update rc2
Mozilla ≫ Seamonkey Version 2.0.1
Mozilla ≫ Seamonkey Version 2.0.2
Mozilla ≫ Seamonkey Version 2.0.3
Mozilla ≫ Seamonkey Version 2.0.4
Mozilla ≫ Seamonkey Version 2.0.5
Mozilla ≫ Seamonkey Version 2.0.6
Mozilla ≫ Seamonkey Version 2.0.7
Mozilla ≫ Seamonkey Version 2.0.8
Mozilla ≫ Seamonkey Version 2.0.9
Mozilla ≫ Seamonkey Version 2.0.10
Mozilla ≫ Firefox Version <= 3.5.16
Mozilla ≫ Firefox Version 1.0
Mozilla ≫ Firefox Version 1.0 Update preview_release
Mozilla ≫ Firefox Version 1.0.1
Mozilla ≫ Firefox Version 1.0.2
Mozilla ≫ Firefox Version 1.0.3
Mozilla ≫ Firefox Version 1.0.4
Mozilla ≫ Firefox Version 1.0.5
Mozilla ≫ Firefox Version 1.0.6
Mozilla ≫ Firefox Version 1.0.7
Mozilla ≫ Firefox Version 1.0.8
Mozilla ≫ Firefox Version 1.5
Mozilla ≫ Firefox Version 1.5 Update beta1
Mozilla ≫ Firefox Version 1.5 Update beta2
Mozilla ≫ Firefox Version 1.5.0.1
Mozilla ≫ Firefox Version 1.5.0.2
Mozilla ≫ Firefox Version 1.5.0.3
Mozilla ≫ Firefox Version 1.5.0.4
Mozilla ≫ Firefox Version 1.5.0.5
Mozilla ≫ Firefox Version 1.5.0.6
Mozilla ≫ Firefox Version 1.5.0.7
Mozilla ≫ Firefox Version 1.5.0.8
Mozilla ≫ Firefox Version 1.5.0.9
Mozilla ≫ Firefox Version 1.5.0.10
Mozilla ≫ Firefox Version 1.5.0.11
Mozilla ≫ Firefox Version 1.5.0.12
Mozilla ≫ Firefox Version 1.5.1
Mozilla ≫ Firefox Version 1.5.2
Mozilla ≫ Firefox Version 1.5.3
Mozilla ≫ Firefox Version 1.5.4
Mozilla ≫ Firefox Version 1.5.5
Mozilla ≫ Firefox Version 1.5.6
Mozilla ≫ Firefox Version 1.5.7
Mozilla ≫ Firefox Version 1.5.8
Mozilla ≫ Firefox Version 2.0
Mozilla ≫ Firefox Version 2.0.0.1
Mozilla ≫ Firefox Version 2.0.0.2
Mozilla ≫ Firefox Version 2.0.0.3
Mozilla ≫ Firefox Version 2.0.0.4
Mozilla ≫ Firefox Version 2.0.0.5
Mozilla ≫ Firefox Version 2.0.0.6
Mozilla ≫ Firefox Version 2.0.0.7
Mozilla ≫ Firefox Version 2.0.0.8
Mozilla ≫ Firefox Version 2.0.0.9
Mozilla ≫ Firefox Version 2.0.0.10
Mozilla ≫ Firefox Version 2.0.0.11
Mozilla ≫ Firefox Version 2.0.0.12
Mozilla ≫ Firefox Version 2.0.0.13
Mozilla ≫ Firefox Version 2.0.0.14
Mozilla ≫ Firefox Version 2.0.0.15
Mozilla ≫ Firefox Version 2.0.0.16
Mozilla ≫ Firefox Version 2.0.0.17
Mozilla ≫ Firefox Version 2.0.0.18
Mozilla ≫ Firefox Version 2.0.0.19
Mozilla ≫ Firefox Version 2.0.0.20
Mozilla ≫ Firefox Version 3.0
Mozilla ≫ Firefox Version 3.0.1
Mozilla ≫ Firefox Version 3.0.2
Mozilla ≫ Firefox Version 3.0.3
Mozilla ≫ Firefox Version 3.0.4
Mozilla ≫ Firefox Version 3.0.5
Mozilla ≫ Firefox Version 3.0.6
Mozilla ≫ Firefox Version 3.0.7
Mozilla ≫ Firefox Version 3.0.8
Mozilla ≫ Firefox Version 3.0.9
Mozilla ≫ Firefox Version 3.0.10
Mozilla ≫ Firefox Version 3.0.11
Mozilla ≫ Firefox Version 3.0.12
Mozilla ≫ Firefox Version 3.0.13
Mozilla ≫ Firefox Version 3.0.14
Mozilla ≫ Firefox Version 3.0.15
Mozilla ≫ Firefox Version 3.0.16
Mozilla ≫ Firefox Version 3.0.17
Mozilla ≫ Firefox Version 3.5
Mozilla ≫ Firefox Version 3.5.1
Mozilla ≫ Firefox Version 3.5.2
Mozilla ≫ Firefox Version 3.5.3
Mozilla ≫ Firefox Version 3.5.4
Mozilla ≫ Firefox Version 3.5.5
Mozilla ≫ Firefox Version 3.5.6
Mozilla ≫ Firefox Version 3.5.7
Mozilla ≫ Firefox Version 3.5.8
Mozilla ≫ Firefox Version 3.5.9
Mozilla ≫ Firefox Version 3.5.10
Mozilla ≫ Firefox Version 3.5.11
Mozilla ≫ Firefox Version 3.5.12
Mozilla ≫ Firefox Version 3.5.13
Mozilla ≫ Firefox Version 3.5.14
Mozilla ≫ Firefox Version 3.5.15
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.82% 0.76
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://downloads.avaya.com/css/P8/documents/100133195
http://www.mandriva.com/security/advisories?name=MDVSA-2011:041
http://support.avaya.com/css/P8/documents/100128655
http://www.mozilla.org/security/announce/2011/mfsa2011-02.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0312.html
http://www.redhat.com/support/errata/RHSA-2011-0313.html
https://bugzilla.mozilla.org/show_bug.cgi?id=616659
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14211