CVE

Id
42766  
CVE No.
CVE-2010-0182  
Status
Candidate  
Description
The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
466354 42766 CVE-2010-0182 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-24.html  View
466355 42766 CVE-2010-0182 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=490790  View
466356 42766 CVE-2010-0182 CONFIRM:http://support.avaya.com/css/P8/documents/100091069  View
466357 42766 CVE-2010-0182 MANDRIVA:MDVSA-2010:070  View
466358 42766 CVE-2010-0182 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:070  View
466359 42766 CVE-2010-0182 REDHAT:RHSA-2010:0500  View
466360 42766 CVE-2010-0182 URL:http://www.redhat.com/support/errata/RHSA-2010-0500.html  View
466361 42766 CVE-2010-0182 REDHAT:RHSA-2010:0501  View
466362 42766 CVE-2010-0182 URL:http://www.redhat.com/support/errata/RHSA-2010-0501.html  View
466363 42766 CVE-2010-0182 SUSE:SUSE-SR:2010:013  View
466364 42766 CVE-2010-0182 URL:http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html  View
466365 42766 CVE-2010-0182 UBUNTU:USN-921-1  View
466366 42766 CVE-2010-0182 URL:http://ubuntu.com/usn/usn-921-1  View
466367 42766 CVE-2010-0182 BID:39479  View
466368 42766 CVE-2010-0182 URL:http://www.securityfocus.com/bid/39479  View
466369 42766 CVE-2010-0182 OVAL:oval:org.mitre.oval:def:7618  View
466370 42766 CVE-2010-0182 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7618  View
466371 42766 CVE-2010-0182 OVAL:oval:org.mitre.oval:def:9375  View
466372 42766 CVE-2010-0182 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9375  View
466373 42766 CVE-2010-0182 SECUNIA:39397  View
466374 42766 CVE-2010-0182 URL:http://secunia.com/advisories/39397  View
466375 42766 CVE-2010-0182 VUPEN:ADV-2010-0748  View
466376 42766 CVE-2010-0182 URL:http://www.vupen.com/english/advisories/2010/0748  View
466377 42766 CVE-2010-0182 VUPEN:ADV-2010-0849  View
466378 42766 CVE-2010-0182 URL:http://www.vupen.com/english/advisories/2010/0849  View
466379 42766 CVE-2010-0182 VUPEN:ADV-2010-1557  View
466380 42766 CVE-2010-0182 URL:http://www.vupen.com/english/advisories/2010/1557  View
466381 42766 CVE-2010-0182 XF:firefox-xmldocumentload-weak-security(57396)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35339 JVNDB-2010-001119 複数の Adobe 製品 におけるクロスドメインの脆弱性 複数の Adobe 製品には、意図されたサンドボックスの制限を回避される脆弱性が存在します。 CVE-2010-0186 42766 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001119.html  View