The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-11-09T11:00:00

Updated: 2024-08-06T23:37:48.659Z

Reserved: 2011-09-23T00:00:00

Link: CVE-2011-3647

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-11-09T11:55:03.520

Modified: 2017-09-19T01:34:00.917

Link: CVE-2011-3647

cve-icon Redhat

Severity : Critical

Publid Date: 2011-11-08T00:00:00Z

Links: CVE-2011-3647 - Bugzilla