CVE-2011-2486

Published: Nov 19, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash.

Affected (1)

Products: Nspluginwrapper: Nspluginwrapper

Nspluginwrapper

1 product

Nspluginwrapper

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nspluginwrapper Nspluginwrapper	Version 1.4.2

Related CWEs

References (12)

http://lwn.net/Alerts/524725/

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1459.html

Source: secalert@redhat.com

http://www.securitytracker.com/id?1027757

Source: secalert@redhat.com

Patch

https://bugzilla.novell.com/show_bug.cgi?id=702034

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=715384

Source: secalert@redhat.com

https://github.com/davidben/nspluginwrapper/commit/7e4ab8e1189846041f955e6c83f72bc1624e7a98

Source: secalert@redhat.com

http://lwn.net/Alerts/524725/

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1459.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027757

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.novell.com/show_bug.cgi?id=702034

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=715384

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/davidben/nspluginwrapper/commit/7e4ab8e1189846041f955e6c83f72bc1624e7a98

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.