CVE-2011-2984

Mozilla: Privilege escalation dropping a tab element in content area

Published Aug 18, 2011 CVSS 2.0 · 10.0 Critical EPSS 3.6% KEV · Not listed
Description
Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2295-1 iceape security update
Debian DSA Debian DSA DSA-2296-1 iceweasel security update
Debian DSA Debian DSA DSA-2297-1 icedove security update
EUVD EUVD EUVD-2011-2952 Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events.
Ubuntu USN Ubuntu USN USN-1184-1 Firefox and Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-1185-1 Thunderbird vulnerabilities
History

No history.

Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 11:22 PM
Reserved
Aug 1, 2011, 12:00 AM
Status
Modified
Published
Aug 18, 2011, 6:55 PM
Modified
Jun 16, 2026, 11:32 PM
Severity
Moderate
Public date
Aug 16, 2011, 12:00 AM