Lucene search
Mozilla FoundationMFSA2010-47HistoryJul 20, 2010 - 12:00 a.m.
Cross-origin data leakage from script filename in error messages β Mozilla
2010-07-2000:00:00
Mozilla Foundation
www.mozilla.org
23
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
68.4%
Security researcher Soroush Dalili reported that potentially sensitive URL parameters could be leaked across domains upon script errors when the script filename and line number is included in the error message.
Affected configurations
Node
mozillafirefoxRange<3.5.11
ORmozillafirefoxRange<3.6.7
ORmozillaseamonkeyRange<2.0.6
ORmozillathunderbirdRange<3.0.6
ORmozillathunderbirdRange<3.1.1
Related
veracode
veracode
Information Disclosure
2020-04-10 00:45:43
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-47
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
seebug
seebug
Mozilla FirefoxεΊιζΆζ―θζ¬ζδ»ΆεδΏ‘ζ―ζ³ι²ζΌζ΄
2010-07-27 00:00:00
prion
prion
Design/Logic Flaw
2010-07-30 13:26:00
nvd
nvd
CVE-2010-2754
2010-07-30 13:26:18
cve
cve
CVE-2010-2754
2010-07-30 13:26:18
ubuntucve
ubuntucve
CVE-2010-2754
2010-07-23 00:00:00
cvelist
cvelist
CVE-2010-2754
2010-07-29 18:00:00
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:169)
2010-09-03 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2010-07-28 00:00:00
openvas
openvas
RedHat Update for seamonkey RHSA-2010:0546-01
2010-07-23 00:00:00
CentOS Update for seamonkey CESA-2010:0546 centos3 i386
2010-08-20 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2010-07-21 00:00:00
thunderbird security update
2010-07-21 00:00:00
firefox security update
2010-07-21 00:00:00
redhat
redhat
(RHSA-2010:0546) Critical: seamonkey security update
2010-07-20 00:00:00
(RHSA-2010:0544) Moderate: thunderbird security update
2010-07-20 00:00:00
(RHSA-2010:0545) Critical: thunderbird security update
2010-07-20 00:00:00
centos
centos
seamonkey security update
2010-08-16 21:36:58
thunderbird security update
2010-08-06 23:32:55
thunderbird security update
2010-07-22 14:50:56
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:37
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: firefox-3.5.11-1.fc12
2010-07-23 02:47:25
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
68.4%
Related for MFSA2010-47