CVE

Id
42753  
CVE No.
CVE-2010-0169  
Status
Candidate  
Description
The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser"s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465937 42753 CVE-2010-0169 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-14.html  View
465938 42753 CVE-2010-0169 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=535806  View
465939 42753 CVE-2010-0169 BID:38918  View
465940 42753 CVE-2010-0169 URL:http://www.securityfocus.com/bid/38918  View
465941 42753 CVE-2010-0169 OVAL:oval:org.mitre.oval:def:11391  View
465942 42753 CVE-2010-0169 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11391  View
465943 42753 CVE-2010-0169 OVAL:oval:org.mitre.oval:def:8431  View
465944 42753 CVE-2010-0169 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8431  View
465945 42753 CVE-2010-0169 VUPEN:ADV-2010-0692  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35511 JVNDB-2010-001291 複数の Mozilla 製品 のブラウザエンジンにおける任意のコードを実行される脆弱性 複数の Mozilla 製品のブラウザエンジンには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0173 42753 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001291.html  View