CVE-2011-2370

Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation…

published June 30, 2011

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00975 · 61.5th percentile
Published
2011-06-30T16:00Z
EPSS history
Timeline
  • 30 JUN 16:00Z
    Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation…
    cvelistv5