CVE ID:	CVE-2011-3647
Description:	The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
Test IDs:	1.3.6.1.4.1.25623.1.0.802517   1.3.6.1.4.1.25623.1.0.802512   1.3.6.1.4.1.25623.1.0.70557   1.3.6.1.4.1.25623.1.0.70555   1.3.6.1.4.1.25623.1.0.70609   1.3.6.1.4.1.25623.1.1.1.1.2011.2345
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3647 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13550 RedHat Security Advisories: RHSA-2011:1439 http://www.redhat.com/support/errata/RHSA-2011-1439.html SuSE Security Announcement: SUSE-SU-2011:1256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html