| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0 | |
| thunderbird | = 5.0= 6.0= 6.0.1= 6.0.2= 7.0 |
Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free