CVE

Id
42756  
CVE No.
CVE-2010-0172  
Status
Candidate  
Description
toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465966 42756 CVE-2010-0172 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-15.html  View
465967 42756 CVE-2010-0172 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=537862  View
465968 42756 CVE-2010-0172 MANDRIVA:MDVSA-2010:070  View
465969 42756 CVE-2010-0172 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:070  View
465970 42756 CVE-2010-0172 BID:38918  View
465971 42756 CVE-2010-0172 URL:http://www.securityfocus.com/bid/38918  View
465972 42756 CVE-2010-0172 OVAL:oval:org.mitre.oval:def:8281  View
465973 42756 CVE-2010-0172 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8281  View
465974 42756 CVE-2010-0172 VUPEN:ADV-2010-0692  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35514 JVNDB-2010-001294 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、XUL ツリーの optgroup における option 要素の参照数の処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-0176 42756 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001294.html  View