Lucene search
Mozilla FoundationMFSA2010-42HistoryJul 20, 2010 - 12:00 a.m.
Cross-origin data disclosure via Web Workers and importScripts â Mozilla
2010-07-2000:00:00
Mozilla Foundation
www.mozilla.org
23
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
58.7%
Security researcher Yosuke Hasegawa reported that the Web Worker method importScripts can read and parse resources from other domains even when the content is not valid JavaScript. This is a violation of the same-origin policy and could be used by an attacker to steal information from other sites.
Affected configurations
Node
mozillafirefoxRange<3.5.11
ORmozillafirefoxRange<3.6.7
ORmozillaseamonkeyRange<2.0.6
ORmozillathunderbirdRange<3.0.6
ORmozillathunderbirdRange<3.1.1
Related
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
ubuntucve
ubuntucve
CVE-2010-1213
2010-07-23 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:46:10
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-42
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
cvelist
cvelist
CVE-2010-1213
2010-07-30 20:00:00
cve
cve
CVE-2010-1213
2010-07-30 20:30:01
seebug
seebug
Mozilla Firefox importScripts()ćšĺźčˇ¨ĺ俥ćŻćłé˛ćźć´
2010-07-27 00:00:00
nvd
nvd
CVE-2010-1213
2010-07-30 20:30:01
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:169)
2010-09-03 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2010-07-28 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2014-06-13 00:00:00
openvas
openvas
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
Mozilla Products Multiple Vulnerabilities jul-10 (Windows)
2010-07-26 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-8.fc12
2010-07-23 02:47:25
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
58.7%
Related for MFSA2010-42