Lucene search
MitreCVE-2010-3400HistorySep 15, 2010 - 8:00 p.m.
CVE-2010-3400
2010-09-1520:00:02
CWE-310
mitre
web.nvd.nist.gov
45
cve-2010-3400
mozilla firefox
javascript
seamonkey
remote attack
cve-2008-5913
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
9.1
Confidence
High
EPSS
0.003
Percentile
66.0%
The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2008-5913.
Affected configurations
Node
mozillafirefoxMatch3.5
ORmozillafirefoxMatch3.5.1
ORmozillafirefoxMatch3.5.2
ORmozillafirefoxMatch3.5.3
ORmozillafirefoxMatch3.5.4
ORmozillafirefoxMatch3.5.5
ORmozillafirefoxMatch3.5.6
ORmozillafirefoxMatch3.5.7
ORmozillafirefoxMatch3.5.8
ORmozillafirefoxMatch3.5.9
Node
mozillafirefoxMatch3.6
ORmozillafirefoxMatch3.6.2
ORmozillafirefoxMatch3.6.3
Node
mozillaseamonkeyRange≤2.0.4
ORmozillaseamonkeyMatch1.0
ORmozillaseamonkeyMatch1.0alpha
ORmozillaseamonkeyMatch1.0beta
ORmozillaseamonkeyMatch1.0.1
ORmozillaseamonkeyMatch1.0.2
ORmozillaseamonkeyMatch1.0.3
ORmozillaseamonkeyMatch1.0.4
ORmozillaseamonkeyMatch1.0.5
ORmozillaseamonkeyMatch1.0.6
ORmozillaseamonkeyMatch1.0.7
ORmozillaseamonkeyMatch1.0.8
ORmozillaseamonkeyMatch1.0.9
ORmozillaseamonkeyMatch1.1
ORmozillaseamonkeyMatch1.1alpha
ORmozillaseamonkeyMatch1.1beta
ORmozillaseamonkeyMatch1.1.1
ORmozillaseamonkeyMatch1.1.2
ORmozillaseamonkeyMatch1.1.3
ORmozillaseamonkeyMatch1.1.4
ORmozillaseamonkeyMatch1.1.5
ORmozillaseamonkeyMatch1.1.6
ORmozillaseamonkeyMatch1.1.7
ORmozillaseamonkeyMatch1.1.8
ORmozillaseamonkeyMatch1.1.9
ORmozillaseamonkeyMatch1.1.10
ORmozillaseamonkeyMatch1.1.11
ORmozillaseamonkeyMatch1.1.12
ORmozillaseamonkeyMatch1.1.13
ORmozillaseamonkeyMatch1.1.14
ORmozillaseamonkeyMatch1.1.15
ORmozillaseamonkeyMatch1.1.16
ORmozillaseamonkeyMatch1.1.17
ORmozillaseamonkeyMatch2.0
ORmozillaseamonkeyMatch2.0alpha_1
ORmozillaseamonkeyMatch2.0alpha_2
ORmozillaseamonkeyMatch2.0alpha_3
ORmozillaseamonkeyMatch2.0beta_1
ORmozillaseamonkeyMatch2.0beta_2
ORmozillaseamonkeyMatch2.0rc1
ORmozillaseamonkeyMatch2.0rc2
ORmozillaseamonkeyMatch2.0.1
ORmozillaseamonkeyMatch2.0.2
ORmozillaseamonkeyMatch2.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | 3.5 | cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.1 | cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.2 | cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.3 | cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.4 | cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.5 | cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.6 | cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.7 | cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.8 | cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.9 | cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2010-09-15 20:00:00
Session fixation
2009-01-20 16:30:00
Code injection
2010-09-15 20:00:00
nvd
nvd
cvelist
cvelist
openvas
openvas
Firefox Information Disclosure Vulnerability (Jan 2009) - Windows
2009-01-28 00:00:00
seebug
seebug
Mozilla Firefox js_InitRandom函数不充分随机数漏洞
2010-09-25 00:00:00
Firefox JavaScript引擎Math.Random()跨域信息泄露漏洞
2010-06-28 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-33
2010-06-25 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2010-06-25 00:00:00
veracode
veracode
Insecure Randomness
2020-04-10 00:43:41
nessus
nessus
RHEL 4 : seamonkey (Unpatched Vulnerability)
2024-06-03 00:00:00
SeaMonkey < 2.0.5 Multiple Vulnerabilities
2010-06-23 00:00:00
Mandriva Linux Security Advisory : firefox (MDVSA-2010:125)
2010-06-25 00:00:00
cve
cve
mozilla
mozilla
User tracking across sites using Math.random() — Mozilla
2010-06-22 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: xulrunner-1.9.2.4-1.fc13
2010-06-24 16:31:49
[SECURITY] Fedora 13 Update: perl-Gtk2-MozEmbed-0.08-6.fc13.14
2010-06-24 16:31:49
[SECURITY] Fedora 13 Update: gnome-python2-extras-2.25.3-19.fc13
2010-06-24 16:31:49
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-06-29 00:00:00
Firefox regression
2010-06-30 00:00:00
suse
suse
remote code execution in MozillaFirefox,mozilla-xulrunner191
2010-07-09 14:53:59
oraclelinux
oraclelinux
firefox security, bug fix, and enhancement update
2010-06-23 00:00:00
firefox security, bug fix, and enhancement update
2010-06-23 00:00:00
centos
centos
firefox security update
2010-08-06 23:15:15
devhelp, esc, firefox, gnome, totem, xulrunner, yelp security update
2010-06-24 16:14:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-06-22 00:00:00
redhat
redhat
(RHSA-2010:0500) Critical: firefox security, bug fix, and enhancement update
2010-06-22 00:00:00
(RHSA-2010:0501) Critical: firefox security, bug fix, and enhancement update
2010-06-22 00:00:00
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-07-01 11:48:42
[Backports-security-announce] Security Update for xulrunner
2010-07-01 11:54:27
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
9.1
Confidence
High
EPSS
0.003
Percentile
66.0%
Related for CVE-2010-3400