Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2011-2372 Details

Description

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html CVE
http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html CVE
https://bugzilla.mozilla.org/show_bug.cgi?id=657462 CVE
https://bugzilla.mozilla.org/show_bug.cgi?id=662309 CVE
https://bugzilla.mozilla.org/show_bug.cgi?id=663899 CVE

see all 32 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-264Permissions, Privileges, and Access Controls[email protected]

Affected Products

ProductVersions
mozilla firefox
<= 3.6.22
3.6
3.6.2
3.6.3
3.6.4

CPE

  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.19:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.20:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:3.6.21:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
mozilla thunderbird
<= 6.0.2
0.1
0.2
0.3
0.4

CPE

  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:3.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
mozilla seamonkey
<= 2.3.3
1.0
1.0 alpha
1.0 beta
1.0.1

CPE

  • cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2011-2372
NVD Published Date:
Sep 29, 2011
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]