CVE:CVE-2011-3001
CNNVD:CNNVD-201109-610
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 存在权限许可和访问控制问题漏洞，该漏洞源于 Mozilla Firefox 4.x 到 6、7.0 之前的 Thunderbird 和 2.4 之前的 SeaMonkey 不会阻止手动附加安装以响应按住 Enter 键，这允许用户辅助的远程攻击者通过精心设计的网络绕过预期的访问限制触发未指定内部错误的站点。
solution:Upgrade mozilla firefox to a higher version than 4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,6.0,and avoid the version 4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,6.0; Upgrade mozilla thunderbird to a higher version than 6.0.2,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.0.13,1.5.0.14,1.5.1,1.5.2,1.7.1,1.7.3,2.0,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,2.0.0.21,2.0.0.22,2.0.0.23,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.1.6,3.1.7,3.1.8,3.1.9,3.1.10,3.1.11,5.0,and avoid the version (,6.0.2],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.0.13,1.5.0.14,1.5.1,1.5.2,1.7.1,1.7.3,2.0,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,2.0.0.21,2.0.0.22,2.0.0.23,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.1.6,3.1.7,3.1.8,3.1.9,3.1.10,3.1.11,5.0; Upgrade mozilla seamonkey to a higher version than 2.3.3,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.99,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.5:1.1.10,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0a1,2.0a1pre,2.1:alpha1,2.1:alpha2,2.1:alpha3,and avoid the version (,2.3.3],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.99,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.5:1.1.10,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0a1,2.0a1pre,2.1:alpha1,2.1:alpha2,2.1:alpha3