Lucene search
Mozilla FoundationMFSA2010-24HistoryMar 30, 2010 - 12:00 a.m.
XMLDocument::load() doesn't check nsIContentPolicy — Mozilla
2010-03-3000:00:00
Mozilla Foundation
www.mozilla.org
20
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
9.4
Confidence
High
EPSS
0.004
Percentile
72.6%
Mozilla community member Wladimir Palant reported that XML documents were failing to call certain security checks when loading new content. This could result in certain resources being loaded that would otherwise violate security policies set by the browser or installed add-ons.
Affected configurations
Node
mozillafirefoxRange<3.5.9
ORmozillafirefoxRange<3.6.2
ORmozillaseamonkeyRange<2.0.4
ORmozillathunderbirdRange<3.0.4
Related
veracode
veracode
Authorization Bypass
2020-04-10 00:43:42
cvelist
cvelist
CVE-2010-0182
2010-04-05 17:00:00
nvd
nvd
CVE-2010-0182
2010-04-05 17:30:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-24
2010-04-06 00:00:00
prion
prion
Design/Logic Flaw
2010-04-05 17:30:00
ubuntucve
ubuntucve
CVE-2010-0182
2010-04-05 00:00:00
cve
cve
CVE-2010-0182
2010-04-05 17:30:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (Apr 2010) - Windows
2010-04-13 00:00:00
Mozilla Products Multiple Vulnerabilitie Apr-10 (Windows)
2010-04-13 00:00:00
Fedora Update for seamonkey FEDORA-2010-5840
2010-04-06 00:00:00
nessus
nessus
Mozilla Thunderbird < 3.0.4 Multiple Vulnerabilities
2010-03-31 00:00:00
Fedora 12 : seamonkey-2.0.4-1.fc12 (2010-5840)
2010-07-01 00:00:00
Fedora 13 : seamonkey-2.0.4-1.fc13 (2010-6236)
2010-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: seamonkey-2.0.4-1.fc12
2010-04-03 04:34:57
[SECURITY] Fedora 13 Update: seamonkey-2.0.4-1.fc13
2010-04-09 04:12:59
ubuntu
ubuntu
Firefox 3.5 and Xulrunner vulnerabilities
2010-04-09 00:00:00
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:37
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
suse
suse
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
redhat
redhat
(RHSA-2010:0500) Critical: firefox security, bug fix, and enhancement update
2010-06-22 00:00:00
(RHSA-2010:0501) Critical: firefox security, bug fix, and enhancement update
2010-06-22 00:00:00
centos
centos
devhelp, esc, firefox, gnome, totem, xulrunner, yelp security update
2010-06-24 16:14:16
firefox security update
2010-08-06 23:15:15
oraclelinux
oraclelinux
firefox security, bug fix, and enhancement update
2010-06-23 00:00:00
firefox security, bug fix, and enhancement update
2010-06-23 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
9.4
Confidence
High
EPSS
0.004
Percentile
72.6%
Related for MFSA2010-24