CVE

Id
42754  
CVE No.
CVE-2010-0170  
Status
Candidate  
Description
Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465946 42754 CVE-2010-0170 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-10.html  View
465947 42754 CVE-2010-0170 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=541530  View
465948 42754 CVE-2010-0170 MANDRIVA:MDVSA-2010:070  View
465949 42754 CVE-2010-0170 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:070  View
465950 42754 CVE-2010-0170 BID:38918  View
465951 42754 CVE-2010-0170 URL:http://www.securityfocus.com/bid/38918  View
465952 42754 CVE-2010-0170 BID:38919  View
465953 42754 CVE-2010-0170 URL:http://www.securityfocus.com/bid/38919  View
465954 42754 CVE-2010-0170 OVAL:oval:org.mitre.oval:def:8602  View
465955 42754 CVE-2010-0170 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8602  View
465956 42754 CVE-2010-0170 VUPEN:ADV-2010-0692  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35512 JVNDB-2010-001292 複数の Mozilla 製品 のブラウザエンジンにおける任意のコードを実行される脆弱性 複数の Mozilla 製品のブラウザエンジンには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0174 42754 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001292.html  View