The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Nov 9, 2011 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade libxul | Dec 10, 2025 | Nov 8, 2011 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Nov 9, 2011 |
| Mfsa2011 46 | — | Upgrade to Mozilla Firefox version 3.6.24 | Jun 14, 2012 | Nov 9, 2011 |
| Oracle_linux | — | Upgrade thunderbird | Oct 16, 2024 | Nov 9, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Nov 9, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub