CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Input Validation
Summary: mozilla firefox before 3.5.17 and 3.6.x before 3.6.14, and seamonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as demonstrated by a question about granting privileges.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2011-03-02
Last Modified Date: 2017-09-19