CVE-2011-3655

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 7.0 Thunderbird versions 5.0 through 7.0

Description The issue allows remote attackers to gain privileges via a crafted web site, as access control is performed without checking for use of the NoWaiverWrapper wrapper.

Recommendations For Mozilla Firefox versions 4.x through 7.0, update to a version that includes the fix for this issue. For Thunderbird versions 5.0 through 7.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to web sites that may exploit this issue until a patch is available.