- Home
- CVEs with nessus.description==Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox :
- CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key.
- CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman discovered crashes in the rendering engine, which could lead to the execution of arbitrary code.
- CVE-2011-2998 Mark Kaplan discovered an integer underflow in the JavaScript engine, which could lead to the execution of arbitrary code.
- CVE-2011-2999 Boris Zbarsky discovered that incorrect handling of the window.location object could lead to bypasses of the same-origin policy.
- CVE-2011-3000 Ian Graham discovered that multiple Location headers might lead to CRLF injection.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top