Back to search
CVE-2011-2370
Published: Jun 30, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.mozilla.org/security/announce/2011/mfsa2011-28.html
x_refsource_CONFIRM
oval:org.mitre.oval:def:14278
vdb-entry
signature
x_refsource_OVAL
https://bugzilla.mozilla.org/show_bug.cgi?id=645699
x_refsource_CONFIRM
SUSE-SA:2011:028
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now