Lucene search
MitreCVE-2010-1215HistoryJul 30, 2010 - 8:30 p.m.
CVE-2010-1215
2010-07-3020:30:01
CWE-94
mitre
web.nvd.nist.gov
36
cve-2010-1215
security vulnerability
remote code execution
mozilla firefox
mozilla thunderbird
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
9.4
Confidence
High
EPSS
0.007
Percentile
80.6%
Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging “access to an object from the chrome scope.”
Affected configurations
Node
mozillafirefoxMatch3.6.1
ORmozillafirefoxMatch3.6.2
ORmozillafirefoxMatch3.6.3
ORmozillafirefoxMatch3.6.4
ORmozillafirefoxMatch3.6.6
Node
mozillathunderbirdMatch3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | 3.6.1 | cpe:2.3:a:mozilla:firefox:3.6.1:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.2 | cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.3 | cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.4 | cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:* |
| mozilla | firefox | 3.6.6 | cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:* |
| mozilla | thunderbird | 3.1 | cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:* |
Related
seebug
seebug
Mozilla Firefox SJOW方式权限提升漏洞
2010-07-27 00:00:00
ubuntucve
ubuntucve
CVE-2010-1215
2010-07-23 00:00:00
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:46:12
nvd
nvd
CVE-2010-1215
2010-07-30 20:30:01
mozilla
mozilla
Arbitrary code execution using SJOW and fast native function — Mozilla
2010-07-20 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-38
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
cvelist
cvelist
CVE-2010-1215
2010-07-30 20:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (MFSA2010-38, MFSA2010-43, MFSA2010-44) - Windows
2010-07-26 00:00:00
Mozilla Products Multiple Vulnerabilitie jul-10 (Windows)
2010-07-26 00:00:00
Fedora Update for thunderbird FEDORA-2010-11379
2010-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: firefox-3.6.7-1.fc13
2010-07-23 02:37:40
nessus
nessus
Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities
2010-07-21 00:00:00
Firefox 3.6 < 3.6.7 Multiple Vulnerabilities
2010-07-22 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
9.4
Confidence
High
EPSS
0.007
Percentile
80.6%
Related for CVE-2010-1215