The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Nov 9, 2011 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade libxulUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Nov 8, 2011 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Nov 9, 2011 |
| Mfsa2011 46 | — | Upgrade to Mozilla Firefox version 3.6.24 | Jun 14, 2012 | Nov 9, 2011 |
| Oracle_linux | — | Upgrade thunderbird | Oct 16, 2024 | Nov 9, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Nov 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub