Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2762
HistorySep 09, 2010 - 7:00 p.m.

CVE-2010-2762

2010-09-0919:00:02
CWE-264
[email protected]
web.nvd.nist.gov
5

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.

Affected configurations

Nvd
Node
mozillafirefoxMatch3.6
OR
mozillafirefoxMatch3.6.2
OR
mozillafirefoxMatch3.6.3
OR
mozillafirefoxMatch3.6.4
OR
mozillafirefoxMatch3.6.6
OR
mozillafirefoxMatch3.6.7
OR
mozillafirefoxMatch3.6.8
Node
mozillathunderbirdMatch3.1
OR
mozillathunderbirdMatch3.1.1
OR
mozillathunderbirdMatch3.1.2
VendorProductVersionCPE
mozillafirefox3.6cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*
mozillafirefox3.6.2cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*
mozillafirefox3.6.3cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*
mozillafirefox3.6.4cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*
mozillafirefox3.6.6cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*
mozillafirefox3.6.7cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*
mozillafirefox3.6.8cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*
mozillathunderbird3.1cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:*
mozillathunderbird3.1.1cpe:2.3:a:mozilla:thunderbird:3.1.1:*:*:*:*:*:*:*
mozillathunderbird3.1.2cpe:2.3:a:mozilla:thunderbird:3.1.2:*:*:*:*:*:*:*

Related

openvas 23
cve 1
securityvulns 2
prion 1
cvelist 1
mozilla 1
ubuntucve 1
veracode 1
ubuntu 2
nessus 38
oraclelinux 1
redhat 1
centos 1
freebsd 1
suse 3
gentoo 1
openvas
openvas
Mozilla Products 'SJOW' Arbitrary Code Execution Vulnerability (MFSA2010-59) - Windows
2010-09-10 00:00:00
Mozilla Products 'SJOW' Arbitrary Code Execution Vulnerability (Windows)
2010-09-10 00:00:00
Ubuntu: Security Advisory (USN-975-1)
2010-09-10 00:00:00
cve
cve
CVE-2010-2762
2010-09-09 19:00:02
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-59
2010-09-10 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-09-16 00:00:00
prion
prion
Authentication flaw
2010-09-09 19:00:00
cvelist
cvelist
CVE-2010-2762
2010-09-09 18:00:00
mozilla
mozilla
SJOW creates scope chains ending in outer object — Mozilla
2010-09-07 00:00:00
ubuntucve
ubuntucve
CVE-2010-2762
2010-09-07 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:48:07
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-09-08 00:00:00
Firefox and Xulrunner regression
2010-09-16 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.1, xulrunner-1.9.2 regression (USN-975-2)
2010-09-17 00:00:00
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.1, xulrunner-1.9.2 vulnerabilities (USN-975-1)
2010-09-09 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-09-08 00:00:00
redhat
redhat
(RHSA-2010:0681) Critical: firefox security update
2010-09-07 00:00:00
centos
centos
firefox, nspr, nss, xulrunner security update
2010-09-08 22:50:48
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-09-07 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-10-12 16:13:47
remote code execution in MozillaFirefox,seamonkey,MozillaThunderbird
2010-11-08 11:27:17
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON
Related for NVD:CVE-2010-2762
openvas23cve1securityvulns2prion1cvelist1mozilla1ubuntucve1veracode1ubuntu2nessus38oraclelinux1redhat1centos1freebsd1suse3gentoo1