CVE-2011-3004

Description

The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior.

Risk Information

Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.312

Associated Vulnerability

VulnerabilityOS Platform
Update for SeaMonkey (2.40)Windows
Update for SeaMonkey (2.46)Windows
Update for SeaMonkey (2.48)Windows
Update for SeaMonkey (2.49.1)Windows
Updates for SeaMonkey (2.49.2)Windows
SeaMonkey (2.49.3)Windows
SeaMonkey (2.49.4)Windows
Multiple Vulnerabilities are affected in Mozilla Firefox 6.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 4.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 4.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 5.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 6.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 4.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 4.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 5.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 6.0Windows
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (57.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (57.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (57.0.2)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (57.0.3)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (57.0.4)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (47.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (47.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (137.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (137.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (137.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (127.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (127.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (127.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (117.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (117.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (79.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (97.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (97.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (107.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (107.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (67.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (67.0.2)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (67.0.3)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (67.0.4)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (70.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (70.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (71.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (72.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (72.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (72.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (73.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (73.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (74.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (75.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (76.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (76.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (77.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (78.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (78.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (87.0)Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.8Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.5Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.2Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.3Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.4Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.5Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.6Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.7Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.8Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.9Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.11Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.12Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.13Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.14Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.15Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.16Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.17Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.18Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.19Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.2Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.3Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.4Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.5Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.6Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.7Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.9Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.5.0.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.5.0.8Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.5.0.9Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.11Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.12Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.13Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.14Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.2Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.3Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.4Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.6Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.7Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.8Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.9Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 4.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 4.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 5.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 6.0Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.0.99Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 1.1.5-1.1.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0a1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0a1preMac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.3.3Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-301497Update for SeaMonkey (2.40)
PATCH-304455Update for SeaMonkey (2.46)
PATCH-306123Update for SeaMonkey (2.48)
PATCH-306558Update for SeaMonkey (2.49.1)
PATCH-307130Updates for SeaMonkey (2.49.2)
PATCH-307477SeaMonkey (2.49.3)
PATCH-307881SeaMonkey (2.49.4)
PATCH-343015Mozilla Firefox (132.0.2)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234