Lucene search
RootSSV:19989HistoryJul 27, 2010 - 12:00 a.m.
Mozilla Firefox SJOW方式权限提升漏洞
2010-07-2700:00:00
Root
www.seebug.org
22
EPSS
0.007
Percentile
80.6%
BUGTRAQ ID: 41868
CVE ID: CVE-2010-1215
Firefox是一款流行的开源WEB浏览器。
当运行在chrome环境中的内容脚本通过SJOW方式访问内容对象时，内容代码可以获得对chrome中对象的访问，并使用该对象以chrome权限执行任意JavaScript。
Mozilla Firefox 3.6.x
Mozilla Thunderbird 3.1.x
厂商补丁：
Mozilla
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2010:0547-01）以及相应补丁:
RHSA-2010:0547-01：Critical: firefox security update
链接：https://www.redhat.com/support/errata/RHSA-2010-0547.html
Related
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
ubuntucve
ubuntucve
CVE-2010-1215
2010-07-23 00:00:00
nvd
nvd
CVE-2010-1215
2010-07-30 20:30:01
cve
cve
CVE-2010-1215
2010-07-30 20:30:01
mozilla
mozilla
Arbitrary code execution using SJOW and fast native function — Mozilla
2010-07-20 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:46:12
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-38
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
cvelist
cvelist
CVE-2010-1215
2010-07-30 20:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (MFSA2010-38, MFSA2010-43, MFSA2010-44) - Windows
2010-07-26 00:00:00
Mozilla Products Multiple Vulnerabilitie jul-10 (Windows)
2010-07-26 00:00:00
Fedora Update for thunderbird FEDORA-2010-11379
2010-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: perl-Gtk2-MozEmbed-0.08-6.fc13.15
2010-07-23 02:37:40
nessus
nessus
Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities
2010-07-21 00:00:00
Firefox 3.6 < 3.6.7 Multiple Vulnerabilities
2010-07-22 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00