CVE-2011-3655
Published: 9 November 2011
Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
firefox Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Not vulnerable
(3.6.24+build2+nobinonly-0ubuntu0.10.04.1)
|
|
| maverick |
Not vulnerable
(3.6.24+build2+nobinonly-0ubuntu0.10.10.1)
|
|
| natty |
Released
(8.0+build1-0ubuntu0.11.04.3)
|
|
| oneiric |
Released
(8.0+build1-0ubuntu0.11.10.3)
|
|
| precise |
Not vulnerable
(9.0~b2+build1-0ubuntu1)
|
|
| quantal |
Not vulnerable
(9.0~b2+build1-0ubuntu1)
|
|
| raring |
Not vulnerable
(9.0~b2+build1-0ubuntu1)
|
|
| upstream |
Released
(8.0)
|
|
|
seamonkey Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Not vulnerable
(2.0.11+build1+nobinonly-0ubuntu0.10.04.1)
|
|
| maverick |
Not vulnerable
(2.0.11+build1+nobinonly-0ubuntu0.10.10.1)
|
|
| natty |
Not vulnerable
(2.0.13+nobinonly-0ubuntu1)
|
|
| oneiric |
Ignored
(end of life)
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| upstream |
Released
(2.5)
|
|
|
thunderbird Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Released
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Released
|
|
| oneiric |
Released
(8.0+build1-0ubuntu0.11.10.1)
|
|
| precise |
Not vulnerable
|
|
| quantal |
Not vulnerable
|
|
| raring |
Not vulnerable
|
|
| upstream |
Needs triage
|
|
|
xulrunner-1.9.2 Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Ignored
(end of life)
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Ignored
(end of life)
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| upstream |
Not vulnerable
|
|
|
xulrunner-2.0 Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Ignored
(end of life)
|
|
| oneiric |
Does not exist
|
|
| precise |
Does not exist
|
|
| quantal |
Does not exist
|
|
| raring |
Does not exist
|
|
| upstream |
Needed
|