CVE-2011-2379

Exploit

EPSS 0.44%
Published 09.08.2011 19:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.

Affected products Warnungen 0 Metrics 2 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Bugzilla Version2.4

   Apple ≫ Safari Version <= 5.0.5
   Apple ≫ Safari Version1.0
   Apple ≫ Safari Version1.0 Updatebeta
   Apple ≫ Safari Version1.0 Updatebeta2
   Apple ≫ Safari Version1.0.0
   Apple ≫ Safari Version1.0.0b1
   Apple ≫ Safari Version1.0.0b2
   Apple ≫ Safari Version1.0.1
   Apple ≫ Safari Version1.0.2
   Apple ≫ Safari Version1.0.3
   Apple ≫ Safari Version1.0.3 Update85.8
   Apple ≫ Safari Version1.0.3 Update85.8.1
   Apple ≫ Safari Version1.1
   Apple ≫ Safari Version1.1.0
   Apple ≫ Safari Version1.1.1
   Apple ≫ Safari Version1.2
   Apple ≫ Safari Version1.2.0
   Apple ≫ Safari Version1.2.1
   Apple ≫ Safari Version1.2.2
   Apple ≫ Safari Version1.2.3
   Apple ≫ Safari Version1.2.4
   Apple ≫ Safari Version1.2.5
   Apple ≫ Safari Version1.3
   Apple ≫ Safari Version1.3.0
   Apple ≫ Safari Version1.3.1
   Apple ≫ Safari Version1.3.2
   Apple ≫ Safari Version1.3.2 Update312.5
   Apple ≫ Safari Version1.3.2 Update312.6
   Apple ≫ Safari Version2
   Apple ≫ Safari Version2.0
   Apple ≫ Safari Version2.0.0
   Apple ≫ Safari Version2.0.1
   Apple ≫ Safari Version2.0.2
   Apple ≫ Safari Version2.0.3
   Apple ≫ Safari Version2.0.3 Update417.8
   Apple ≫ Safari Version2.0.3 Update417.9
   Apple ≫ Safari Version2.0.3 Update417.9.2
   Apple ≫ Safari Version2.0.3 Update417.9.3
   Apple ≫ Safari Version2.0.4
   Apple ≫ Safari Version3
   Apple ≫ Safari Version3.0
   Apple ≫ Safari Version3.0.0
   Apple ≫ Safari Version3.0.0b
   Apple ≫ Safari Version3.0.1
   Apple ≫ Safari Version3.0.1b
   Apple ≫ Safari Version3.0.2
   Apple ≫ Safari Version3.0.2b
   Apple ≫ Safari Version3.0.3
   Apple ≫ Safari Version3.0.3b
   Apple ≫ Safari Version3.0.4
   Apple ≫ Safari Version3.0.4b
   Apple ≫ Safari Version3.1.0
   Apple ≫ Safari Version3.1.0b
   Apple ≫ Safari Version3.1.1
   Apple ≫ Safari Version3.1.2
   Apple ≫ Safari Version3.2.0
   Apple ≫ Safari Version3.2.1
   Apple ≫ Safari Version3.2.2
   Apple ≫ Safari Version4.1
   Apple ≫ Safari Version4.1.1
   Apple ≫ Safari Version4.1.2
   Apple ≫ Safari Version5.0
   Apple ≫ Safari Version5.0.1
   Apple ≫ Safari Version5.0.2
   Apple ≫ Safari Version5.0.3
   Apple ≫ Safari Version5.0.4
   Microsoft ≫ Internet Explorer Version <= 8
   Microsoft ≫ Internet Explorer Version3.0
   Microsoft ≫ Internet Explorer Version4.0
   Microsoft ≫ Internet Explorer Version5
   Microsoft ≫ Internet Explorer Version6
   Microsoft ≫ Internet Explorer Version7

Mozilla ≫ Bugzilla Version2.6

Mozilla ≫ Bugzilla Version2.8

Mozilla ≫ Bugzilla Version2.9

Mozilla ≫ Bugzilla Version2.10

Mozilla ≫ Bugzilla Version2.12

Mozilla ≫ Bugzilla Version2.14

Mozilla ≫ Bugzilla Version2.14.1

Mozilla ≫ Bugzilla Version2.14.2

Mozilla ≫ Bugzilla Version2.14.3

Mozilla ≫ Bugzilla Version2.14.4

Mozilla ≫ Bugzilla Version2.14.5

Mozilla ≫ Bugzilla Version2.16

Mozilla ≫ Bugzilla Version2.16 Updaterc1

Mozilla ≫ Bugzilla Version2.16.1

Mozilla ≫ Bugzilla Version2.16.2

Mozilla ≫ Bugzilla Version2.16.3

Mozilla ≫ Bugzilla Version2.16.4

Mozilla ≫ Bugzilla Version2.16.5

Mozilla ≫ Bugzilla Version2.16.6

Mozilla ≫ Bugzilla Version2.16.7

Mozilla ≫ Bugzilla Version2.16.8

Mozilla ≫ Bugzilla Version2.16.9

Mozilla ≫ Bugzilla Version2.16.10

Mozilla ≫ Bugzilla Version2.16.11

Mozilla ≫ Bugzilla Version2.17

Mozilla ≫ Bugzilla Version2.17.1

Mozilla ≫ Bugzilla Version2.17.3

Mozilla ≫ Bugzilla Version2.17.4

Mozilla ≫ Bugzilla Version2.17.5

Mozilla ≫ Bugzilla Version2.17.6

Mozilla ≫ Bugzilla Version2.17.7

Mozilla ≫ Bugzilla Version2.18

Mozilla ≫ Bugzilla Version2.18 Updaterc1

Mozilla ≫ Bugzilla Version2.18 Updaterc2

Mozilla ≫ Bugzilla Version2.18 Updaterc3

Mozilla ≫ Bugzilla Version2.18.1

Mozilla ≫ Bugzilla Version2.18.2

Mozilla ≫ Bugzilla Version2.18.3

Mozilla ≫ Bugzilla Version2.18.4

Mozilla ≫ Bugzilla Version2.18.5

Mozilla ≫ Bugzilla Version2.19

Mozilla ≫ Bugzilla Version2.19.1

Mozilla ≫ Bugzilla Version2.19.2

Mozilla ≫ Bugzilla Version2.19.3

Mozilla ≫ Bugzilla Version2.20

Mozilla ≫ Bugzilla Version2.20 Updaterc1

Mozilla ≫ Bugzilla Version2.20 Updaterc2

Mozilla ≫ Bugzilla Version2.20.1

Mozilla ≫ Bugzilla Version2.20.2

Mozilla ≫ Bugzilla Version2.20.3

Mozilla ≫ Bugzilla Version2.20.4

Mozilla ≫ Bugzilla Version2.21

Mozilla ≫ Bugzilla Version2.21.1

Mozilla ≫ Bugzilla Version2.21.2

Mozilla ≫ Bugzilla Version2.22

Mozilla ≫ Bugzilla Version2.22 Updaterc1

Mozilla ≫ Bugzilla Version2.22.1

Mozilla ≫ Bugzilla Version2.22.2

Mozilla ≫ Bugzilla Version2.22.3

Mozilla ≫ Bugzilla Version2.22.4

Mozilla ≫ Bugzilla Version2.22.5

Mozilla ≫ Bugzilla Version2.22.6

Mozilla ≫ Bugzilla Version2.22.7

Mozilla ≫ Bugzilla Version3.0.0

Mozilla ≫ Bugzilla Version3.0.1

Mozilla ≫ Bugzilla Version3.0.2

Mozilla ≫ Bugzilla Version3.0.3

Mozilla ≫ Bugzilla Version3.0.4

Mozilla ≫ Bugzilla Version3.0.5

Mozilla ≫ Bugzilla Version3.0.6

Mozilla ≫ Bugzilla Version3.0.7

Mozilla ≫ Bugzilla Version3.0.8

Mozilla ≫ Bugzilla Version3.0.9

Mozilla ≫ Bugzilla Version3.0.10

Mozilla ≫ Bugzilla Version3.0.11

Mozilla ≫ Bugzilla Version3.2

Mozilla ≫ Bugzilla Version3.2 Updaterc1

Mozilla ≫ Bugzilla Version3.2 Updaterc2

Mozilla ≫ Bugzilla Version3.2.1

Mozilla ≫ Bugzilla Version3.2.2

Mozilla ≫ Bugzilla Version3.2.3

Mozilla ≫ Bugzilla Version3.2.4

Mozilla ≫ Bugzilla Version3.2.5

Mozilla ≫ Bugzilla Version3.2.6

Mozilla ≫ Bugzilla Version3.2.7

Mozilla ≫ Bugzilla Version3.2.8

Mozilla ≫ Bugzilla Version3.2.9

Mozilla ≫ Bugzilla Version3.2.10

Mozilla ≫ Bugzilla Version3.3.1

Mozilla ≫ Bugzilla Version3.3.2

Mozilla ≫ Bugzilla Version3.3.3

Mozilla ≫ Bugzilla Version3.3.4

Mozilla ≫ Bugzilla Version3.4

Mozilla ≫ Bugzilla Version3.4 Updaterc1

Mozilla ≫ Bugzilla Version3.4.1

Mozilla ≫ Bugzilla Version3.4.2

Mozilla ≫ Bugzilla Version3.4.3

Mozilla ≫ Bugzilla Version3.4.4

Mozilla ≫ Bugzilla Version3.4.5

Mozilla ≫ Bugzilla Version3.4.6

Mozilla ≫ Bugzilla Version3.4.7

Mozilla ≫ Bugzilla Version3.4.8

Mozilla ≫ Bugzilla Version3.4.9

Mozilla ≫ Bugzilla Version3.4.10

Mozilla ≫ Bugzilla Version3.4.11

Mozilla ≫ Bugzilla Version3.5

Mozilla ≫ Bugzilla Version3.5.1

Mozilla ≫ Bugzilla Version3.5.2

Mozilla ≫ Bugzilla Version3.5.3

Mozilla ≫ Bugzilla Version3.6

Mozilla ≫ Bugzilla Version3.6 Updaterc1

Mozilla ≫ Bugzilla Version3.6.1

Mozilla ≫ Bugzilla Version3.6.2

Mozilla ≫ Bugzilla Version3.6.3

Mozilla ≫ Bugzilla Version3.6.4

Mozilla ≫ Bugzilla Version3.6.5

Mozilla ≫ Bugzilla Version3.7

Mozilla ≫ Bugzilla Version3.7.1

Mozilla ≫ Bugzilla Version3.7.2

Mozilla ≫ Bugzilla Version3.7.3

Mozilla ≫ Bugzilla Version4.0

Mozilla ≫ Bugzilla Version4.0 Updaterc1

Mozilla ≫ Bugzilla Version4.0 Updaterc2

Mozilla ≫ Bugzilla Version4.0.1

Mozilla ≫ Bugzilla Version4.1

Mozilla ≫ Bugzilla Version4.1.1

Mozilla ≫ Bugzilla Version4.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.44%	0.603

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.debian.org/security/2011/dsa-2322

http://secunia.com/advisories/45501

Vendor Advisory

http://www.bugzilla.org/security/3.4.11/

Vendor Advisory

http://www.osvdb.org/74297

http://www.securityfocus.com/bid/49042

https://bugzilla.mozilla.org/show_bug.cgi?id=637981

Patch

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/69033

https://nvd.nist.gov/vuln/detail/CVE-2011-2379

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-2379

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-2379

EUVD