CVE-2011-3666

Mozilla: Multiple security flaws fixed in v3.6.25 (Mac) and v9

Published Dec 21, 2011 CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Description
Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-2372 on Mac OS X.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-3625 Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-2372 on Mac OS X.
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 11:46 PM
Reserved
Sep 23, 2011, 12:00 AM
Status
Modified
Published
Dec 21, 2011, 4:02 AM
Modified
Jun 16, 2026, 11:33 PM
Severity
Critical
Public date
Dec 20, 2011, 12:00 AM