SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2011-0051

Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as…

MEDIUM 6.8EPSS 1.82%

Does this matter?

Lower severity and a low EPSS score (1.82%). Track it; it rarely justifies an emergency change on its own.

Description

Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as demonstrated by a question about granting privileges.

CVSS 2.0
6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
1.82% probability · 78th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
mozilla/firefox · mozilla/seamonkey
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.