NetSight
IP …
low3.5

CVE-2011-2372

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the …

Impact

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.6.22
Versions 3.6, 3.6.2, 3.6.3, 3.6.4, 3.6.6
MozillaThunderbird
through 6.0.2
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaSeamonkey
through 2.3.3
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-264

References