Lucene search
Mozilla FoundationMFSA2010-38HistoryJul 20, 2010 - 12:00 a.m.
Arbitrary code execution using SJOW and fast native function — Mozilla
2010-07-2000:00:00
Mozilla Foundation
www.mozilla.org
14
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
80.6%
Mozilla security researcher moz_bug_r_a4 reported that when content script which is running in a chrome context accesses a content object via SJOW, the content code can gain access to an object from the chrome scope and use that object to run arbitrary JavaScript with chrome privileges.
Affected configurations
Node
mozillafirefoxRange<3.6.7
ORmozillathunderbirdRange<3.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
Related
seebug
seebug
Mozilla Firefox SJOW方式权限提升漏洞
2010-07-27 00:00:00
ubuntucve
ubuntucve
CVE-2010-1215
2010-07-23 00:00:00
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
nvd
nvd
CVE-2010-1215
2010-07-30 20:30:01
cve
cve
CVE-2010-1215
2010-07-30 20:30:01
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:46:12
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-38
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
cvelist
cvelist
CVE-2010-1215
2010-07-30 20:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (MFSA2010-38, MFSA2010-43, MFSA2010-44) - Windows
2010-07-26 00:00:00
Mozilla Products Multiple Vulnerabilitie jul-10 (Windows)
2010-07-26 00:00:00
Fedora Update for thunderbird FEDORA-2010-11379
2010-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: firefox-3.6.7-1.fc13
2010-07-23 02:37:40
nessus
nessus
Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities
2010-07-21 00:00:00
Firefox 3.6 < 3.6.7 Multiple Vulnerabilities
2010-07-22 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
80.6%
Related for MFSA2010-38