CVE-2011-2379

Exploit

EPSS 1.67%
Veröffentlicht 09.08.2011 19:55:01
Zuletzt bearbeitet 16.06.2026 23:31:13
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

NVD 128 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Bugzilla Version 2.4

   Apple ≫ Safari Version <= 5.0.5
   Apple ≫ Safari Version 1.0
   Apple ≫ Safari Version 1.0 Update beta
   Apple ≫ Safari Version 1.0 Update beta2
   Apple ≫ Safari Version 1.0.0
   Apple ≫ Safari Version 1.0.0b1
   Apple ≫ Safari Version 1.0.0b2
   Apple ≫ Safari Version 1.0.1
   Apple ≫ Safari Version 1.0.2
   Apple ≫ Safari Version 1.0.3
   Apple ≫ Safari Version 1.0.3 Update 85.8
   Apple ≫ Safari Version 1.0.3 Update 85.8.1
   Apple ≫ Safari Version 1.1
   Apple ≫ Safari Version 1.1.0
   Apple ≫ Safari Version 1.1.1
   Apple ≫ Safari Version 1.2
   Apple ≫ Safari Version 1.2.0
   Apple ≫ Safari Version 1.2.1
   Apple ≫ Safari Version 1.2.2
   Apple ≫ Safari Version 1.2.3
   Apple ≫ Safari Version 1.2.4
   Apple ≫ Safari Version 1.2.5
   Apple ≫ Safari Version 1.3
   Apple ≫ Safari Version 1.3.0
   Apple ≫ Safari Version 1.3.1
   Apple ≫ Safari Version 1.3.2
   Apple ≫ Safari Version 1.3.2 Update 312.5
   Apple ≫ Safari Version 1.3.2 Update 312.6
   Apple ≫ Safari Version 2
   Apple ≫ Safari Version 2.0
   Apple ≫ Safari Version 2.0.0
   Apple ≫ Safari Version 2.0.1
   Apple ≫ Safari Version 2.0.2
   Apple ≫ Safari Version 2.0.3
   Apple ≫ Safari Version 2.0.3 Update 417.8
   Apple ≫ Safari Version 2.0.3 Update 417.9
   Apple ≫ Safari Version 2.0.3 Update 417.9.2
   Apple ≫ Safari Version 2.0.3 Update 417.9.3
   Apple ≫ Safari Version 2.0.4
   Apple ≫ Safari Version 3
   Apple ≫ Safari Version 3.0
   Apple ≫ Safari Version 3.0.0
   Apple ≫ Safari Version 3.0.0b
   Apple ≫ Safari Version 3.0.1
   Apple ≫ Safari Version 3.0.1b
   Apple ≫ Safari Version 3.0.2
   Apple ≫ Safari Version 3.0.2b
   Apple ≫ Safari Version 3.0.3
   Apple ≫ Safari Version 3.0.3b
   Apple ≫ Safari Version 3.0.4
   Apple ≫ Safari Version 3.0.4b
   Apple ≫ Safari Version 3.1.0
   Apple ≫ Safari Version 3.1.0b
   Apple ≫ Safari Version 3.1.1
   Apple ≫ Safari Version 3.1.2
   Apple ≫ Safari Version 3.2.0
   Apple ≫ Safari Version 3.2.1
   Apple ≫ Safari Version 3.2.2
   Apple ≫ Safari Version 4.1
   Apple ≫ Safari Version 4.1.1
   Apple ≫ Safari Version 4.1.2
   Apple ≫ Safari Version 5.0
   Apple ≫ Safari Version 5.0.1
   Apple ≫ Safari Version 5.0.2
   Apple ≫ Safari Version 5.0.3
   Apple ≫ Safari Version 5.0.4
   Microsoft ≫ Internet Explorer Version <= 8
   Microsoft ≫ Internet Explorer Version 3.0
   Microsoft ≫ Internet Explorer Version 4.0
   Microsoft ≫ Internet Explorer Version 5
   Microsoft ≫ Internet Explorer Version 6
   Microsoft ≫ Internet Explorer Version 7

Mozilla ≫ Bugzilla Version 2.6

Mozilla ≫ Bugzilla Version 2.8

Mozilla ≫ Bugzilla Version 2.9

Mozilla ≫ Bugzilla Version 2.10

Mozilla ≫ Bugzilla Version 2.12

Mozilla ≫ Bugzilla Version 2.14

Mozilla ≫ Bugzilla Version 2.14.1

Mozilla ≫ Bugzilla Version 2.14.2

Mozilla ≫ Bugzilla Version 2.14.3

Mozilla ≫ Bugzilla Version 2.14.4

Mozilla ≫ Bugzilla Version 2.14.5

Mozilla ≫ Bugzilla Version 2.16

Mozilla ≫ Bugzilla Version 2.16 Update rc1

Mozilla ≫ Bugzilla Version 2.16.1

Mozilla ≫ Bugzilla Version 2.16.2

Mozilla ≫ Bugzilla Version 2.16.3

Mozilla ≫ Bugzilla Version 2.16.4

Mozilla ≫ Bugzilla Version 2.16.5

Mozilla ≫ Bugzilla Version 2.16.6

Mozilla ≫ Bugzilla Version 2.16.7

Mozilla ≫ Bugzilla Version 2.16.8

Mozilla ≫ Bugzilla Version 2.16.9

Mozilla ≫ Bugzilla Version 2.16.10

Mozilla ≫ Bugzilla Version 2.16.11

Mozilla ≫ Bugzilla Version 2.17

Mozilla ≫ Bugzilla Version 2.17.1

Mozilla ≫ Bugzilla Version 2.17.3

Mozilla ≫ Bugzilla Version 2.17.4

Mozilla ≫ Bugzilla Version 2.17.5

Mozilla ≫ Bugzilla Version 2.17.6

Mozilla ≫ Bugzilla Version 2.17.7

Mozilla ≫ Bugzilla Version 2.18

Mozilla ≫ Bugzilla Version 2.18 Update rc1

Mozilla ≫ Bugzilla Version 2.18 Update rc2

Mozilla ≫ Bugzilla Version 2.18 Update rc3

Mozilla ≫ Bugzilla Version 2.18.1

Mozilla ≫ Bugzilla Version 2.18.2

Mozilla ≫ Bugzilla Version 2.18.3

Mozilla ≫ Bugzilla Version 2.18.4

Mozilla ≫ Bugzilla Version 2.18.5

Mozilla ≫ Bugzilla Version 2.19

Mozilla ≫ Bugzilla Version 2.19.1

Mozilla ≫ Bugzilla Version 2.19.2

Mozilla ≫ Bugzilla Version 2.19.3

Mozilla ≫ Bugzilla Version 2.20

Mozilla ≫ Bugzilla Version 2.20 Update rc1

Mozilla ≫ Bugzilla Version 2.20 Update rc2

Mozilla ≫ Bugzilla Version 2.20.1

Mozilla ≫ Bugzilla Version 2.20.2

Mozilla ≫ Bugzilla Version 2.20.3

Mozilla ≫ Bugzilla Version 2.20.4

Mozilla ≫ Bugzilla Version 2.21

Mozilla ≫ Bugzilla Version 2.21.1

Mozilla ≫ Bugzilla Version 2.21.2

Mozilla ≫ Bugzilla Version 2.22

Mozilla ≫ Bugzilla Version 2.22 Update rc1

Mozilla ≫ Bugzilla Version 2.22.1

Mozilla ≫ Bugzilla Version 2.22.2

Mozilla ≫ Bugzilla Version 2.22.3

Mozilla ≫ Bugzilla Version 2.22.4

Mozilla ≫ Bugzilla Version 2.22.5

Mozilla ≫ Bugzilla Version 2.22.6

Mozilla ≫ Bugzilla Version 2.22.7

Mozilla ≫ Bugzilla Version 3.0.0

Mozilla ≫ Bugzilla Version 3.0.1

Mozilla ≫ Bugzilla Version 3.0.2

Mozilla ≫ Bugzilla Version 3.0.3

Mozilla ≫ Bugzilla Version 3.0.4

Mozilla ≫ Bugzilla Version 3.0.5

Mozilla ≫ Bugzilla Version 3.0.6

Mozilla ≫ Bugzilla Version 3.0.7

Mozilla ≫ Bugzilla Version 3.0.8

Mozilla ≫ Bugzilla Version 3.0.9

Mozilla ≫ Bugzilla Version 3.0.10

Mozilla ≫ Bugzilla Version 3.0.11

Mozilla ≫ Bugzilla Version 3.2

Mozilla ≫ Bugzilla Version 3.2 Update rc1

Mozilla ≫ Bugzilla Version 3.2 Update rc2

Mozilla ≫ Bugzilla Version 3.2.1

Mozilla ≫ Bugzilla Version 3.2.2

Mozilla ≫ Bugzilla Version 3.2.3

Mozilla ≫ Bugzilla Version 3.2.4

Mozilla ≫ Bugzilla Version 3.2.5

Mozilla ≫ Bugzilla Version 3.2.6

Mozilla ≫ Bugzilla Version 3.2.7

Mozilla ≫ Bugzilla Version 3.2.8

Mozilla ≫ Bugzilla Version 3.2.9

Mozilla ≫ Bugzilla Version 3.2.10

Mozilla ≫ Bugzilla Version 3.3.1

Mozilla ≫ Bugzilla Version 3.3.2

Mozilla ≫ Bugzilla Version 3.3.3

Mozilla ≫ Bugzilla Version 3.3.4

Mozilla ≫ Bugzilla Version 3.4

Mozilla ≫ Bugzilla Version 3.4 Update rc1

Mozilla ≫ Bugzilla Version 3.4.1

Mozilla ≫ Bugzilla Version 3.4.2

Mozilla ≫ Bugzilla Version 3.4.3

Mozilla ≫ Bugzilla Version 3.4.4

Mozilla ≫ Bugzilla Version 3.4.5

Mozilla ≫ Bugzilla Version 3.4.6

Mozilla ≫ Bugzilla Version 3.4.7

Mozilla ≫ Bugzilla Version 3.4.8

Mozilla ≫ Bugzilla Version 3.4.9

Mozilla ≫ Bugzilla Version 3.4.10

Mozilla ≫ Bugzilla Version 3.4.11

Mozilla ≫ Bugzilla Version 3.5

Mozilla ≫ Bugzilla Version 3.5.1

Mozilla ≫ Bugzilla Version 3.5.2

Mozilla ≫ Bugzilla Version 3.5.3

Mozilla ≫ Bugzilla Version 3.6

Mozilla ≫ Bugzilla Version 3.6 Update rc1

Mozilla ≫ Bugzilla Version 3.6.1

Mozilla ≫ Bugzilla Version 3.6.2

Mozilla ≫ Bugzilla Version 3.6.3

Mozilla ≫ Bugzilla Version 3.6.4

Mozilla ≫ Bugzilla Version 3.6.5

Mozilla ≫ Bugzilla Version 3.7

Mozilla ≫ Bugzilla Version 3.7.1

Mozilla ≫ Bugzilla Version 3.7.2

Mozilla ≫ Bugzilla Version 3.7.3

Mozilla ≫ Bugzilla Version 4.0

Mozilla ≫ Bugzilla Version 4.0 Update rc1

Mozilla ≫ Bugzilla Version 4.0 Update rc2

Mozilla ≫ Bugzilla Version 4.0.1

Mozilla ≫ Bugzilla Version 4.1

Mozilla ≫ Bugzilla Version 4.1.1

Mozilla ≫ Bugzilla Version 4.1.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.67%	0.737

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.debian.org/security/2011/dsa-2322

http://secunia.com/advisories/45501

Vendor Advisory

http://www.bugzilla.org/security/3.4.11/

Vendor Advisory

http://www.osvdb.org/74297

http://www.securityfocus.com/bid/49042

https://bugzilla.mozilla.org/show_bug.cgi?id=637981

Patch

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/69033

https://nvd.nist.gov/vuln/detail/CVE-2011-2379