Lucene search
Mozilla FoundationMFSA2010-14HistoryMar 23, 2010 - 12:00 a.m.
Browser chrome defacement via cached XUL stylesheets — Mozilla
2010-03-2300:00:00
Mozilla Foundation
www.mozilla.org
12
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.013
Percentile
85.7%
Mozilla developer Wladimir Palant reported that stylesheets used in remote XUL documents can wind up in the XUL cache where it can later be accessed by browser chrome for use in styling the user interface. A malicious website could use this issue to pollute a user’s XUL cache and change style attributes of their browser such as font size and color.
Affected configurations
Node
mozillafirefoxRange<3.0.18
ORmozillafirefoxRange<3.5.8
ORmozillafirefoxRange<3.6.2
ORmozillaseamonkeyRange<2.0.3
ORmozillathunderbirdRange<3.0.2
Related
seebug
seebug
Mozilla Firefox缓存XUL样式表更改浏览器UI漏洞
2010-03-26 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-14
2010-04-06 00:00:00
cvelist
cvelist
CVE-2010-0169
2010-03-25 20:31:00
ubuntucve
ubuntucve
CVE-2010-0169
2010-03-25 00:00:00
cve
cve
CVE-2010-0169
2010-03-25 21:00:00
prion
prion
Code injection
2010-03-25 21:00:00
nvd
nvd
CVE-2010-0169
2010-03-25 21:00:00
veracode
veracode
Erroneous Stylesheet Caching
2020-04-10 00:42:21
openvas
openvas
Mozilla Products Multiple Vulnerabilities Mar-10 (Linux)
2010-03-30 00:00:00
Mozilla Products Multiple Vulnerabilities Mar-10 (Windows)
2010-03-30 00:00:00
Mozilla Products Multiple Vulnerabilities (Mar 2010) - Linux
2010-03-30 00:00:00
redhat
redhat
(RHSA-2010:0113) Critical: seamonkey security update
2010-02-17 00:00:00
(RHSA-2010:0112) Critical: firefox security update
2010-02-17 00:00:00
(RHSA-2010:0153) Moderate: thunderbird security update
2010-03-17 00:00:00
centos
centos
seamonkey security update
2010-02-18 00:29:51
firefox, xulrunner security update
2010-02-18 00:33:18
thunderbird security update
2010-03-26 20:37:29
oraclelinux
oraclelinux
seamonkey security update
2010-02-17 00:00:00
firefox security update
2010-02-17 00:00:00
thunderbird security update
2010-03-17 00:00:00
nessus
nessus
Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities
2010-03-02 00:00:00
Oracle Linux 3 / 4 : seamonkey (ELSA-2010-0113)
2013-07-12 00:00:00
RHEL 3 / 4 : seamonkey (RHSA-2010:0113)
2010-02-18 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.013
Percentile
85.7%
Related for MFSA2010-14