VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 9, 2011· Updated Jun 16, 2026

CVE-2011-3655

CVE-2011-3655

Description

Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

30
  • Mozilla Corporation/Firefox21 versions
    cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.0 to 7.0
  • Mozilla Corporation/Thunderbird6 versions
    cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:7.0:*:*:*:*:*:*:*
    • (no CPE)range: 5.0 to 7.0
  • osv-coords3 versions
    pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed
    < 50.1.0-1.1+ 2 more
    • (no CPE)range: < 50.1.0-1.1
    • (no CPE)range: < 45.5.1-1.1
    • (no CPE)range: < 128.5.1-1.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.