CVE

Id
42746  
CVE No.
CVE-2010-0162  
Status
Candidate  
Description
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465828 42746 CVE-2010-0162 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-05.html  View
465829 42746 CVE-2010-0162 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=455472  View
465830 42746 CVE-2010-0162 DEBIAN:DSA-1999  View
465831 42746 CVE-2010-0162 URL:http://www.debian.org/security/2010/dsa-1999  View
465832 42746 CVE-2010-0162 FEDORA:FEDORA-2010-1727  View
465833 42746 CVE-2010-0162 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html  View
465834 42746 CVE-2010-0162 FEDORA:FEDORA-2010-1932  View
465835 42746 CVE-2010-0162 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html  View
465836 42746 CVE-2010-0162 FEDORA:FEDORA-2010-1936  View
465837 42746 CVE-2010-0162 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html  View
465838 42746 CVE-2010-0162 MANDRIVA:MDVSA-2010:042  View
465839 42746 CVE-2010-0162 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:042  View
465840 42746 CVE-2010-0162 REDHAT:RHSA-2010:0112  View
465841 42746 CVE-2010-0162 URL:http://www.redhat.com/support/errata/RHSA-2010-0112.html  View
465842 42746 CVE-2010-0162 SUSE:SUSE-SA:2010:015  View
465843 42746 CVE-2010-0162 URL:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html  View
465844 42746 CVE-2010-0162 UBUNTU:USN-895-1  View
465845 42746 CVE-2010-0162 URL:http://www.ubuntu.com/usn/USN-895-1  View
465846 42746 CVE-2010-0162 UBUNTU:USN-896-1  View
465847 42746 CVE-2010-0162 URL:http://www.ubuntu.com/usn/USN-896-1  View
465848 42746 CVE-2010-0162 OVAL:oval:org.mitre.oval:def:10697  View
465849 42746 CVE-2010-0162 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10697  View
465850 42746 CVE-2010-0162 OVAL:oval:org.mitre.oval:def:8631  View
465851 42746 CVE-2010-0162 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8631  View
465852 42746 CVE-2010-0162 SECUNIA:37242  View
465853 42746 CVE-2010-0162 URL:http://secunia.com/advisories/37242  View
465854 42746 CVE-2010-0162 SECUNIA:38847  View
465855 42746 CVE-2010-0162 URL:http://secunia.com/advisories/38847  View
465856 42746 CVE-2010-0162 VUPEN:ADV-2010-0405  View
465857 42746 CVE-2010-0162 URL:http://www.vupen.com/english/advisories/2010/0405  View
465858 42746 CVE-2010-0162 XF:mozilla-svg-xss(56363)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35434 JVNDB-2010-001214 Mac OS X 上で稼働する Mozilla Firefox の gfxTextRun::SanitizeGlyphRuns 関数における任意のコードを実行される脆弱性 Mac OS X 上で稼働する Mozilla Firefox のブラウザエンジンにおける gfxTextRun::SanitizeGlyphRuns 関数には、Core Text API を使用している場合、削除を実行する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0166 42746 5.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001214.html  View