CVE

Id
43238  
CVE No.
CVE-2010-0654  
Status
Candidate  
Description
Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.  
Phase
Assigned (20100218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471141 43238 CVE-2010-0654 MISC:http://code.google.com/p/chromium/issues/detail?id=9877  View
471142 43238 CVE-2010-0654 MISC:http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html  View
471143 43238 CVE-2010-0654 MISC:http://websec.sv.cmu.edu/css/css.pdf  View
471144 43238 CVE-2010-0654 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-46.html  View
471145 43238 CVE-2010-0654 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=524223  View
471146 43238 CVE-2010-0654 OVAL:oval:org.mitre.oval:def:11811  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36608 JVNDB-2010-002388 Google Chrome にて使用される Skia における整数オーバーフローの脆弱性 Google Chrome にて使用される Skia には、CANVAS 要素の処理に関して不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2010-0658 43238 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002388.html  View