VULNERABILITY INTELLIGENCE

CVE-2011-3655

CVSS score9.3 HIGH

EPSS probability1.88%

CISA KEVNot currently listed

Published2011-11-09

Last modified2026-06-16

Description

Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.