CVE

Id
46358  
CVE No.
CVE-2010-3774  
Status
Candidate  
Description
The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle (1) about:neterror and (2) about:certerror pages, which allows remote attackers to spoof the location bar via a crafted web site.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505651 46358 CVE-2010-3774 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-83.html  View
505652 46358 CVE-2010-3774 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=602780  View
505653 46358 CVE-2010-3774 CONFIRM:http://support.avaya.com/css/P8/documents/100124650  View
505654 46358 CVE-2010-3774 FEDORA:FEDORA-2010-18773  View
505655 46358 CVE-2010-3774 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html  View
505656 46358 CVE-2010-3774 FEDORA:FEDORA-2010-18775  View
505657 46358 CVE-2010-3774 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html  View
505658 46358 CVE-2010-3774 FEDORA:FEDORA-2010-18890  View
505659 46358 CVE-2010-3774 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html  View
505660 46358 CVE-2010-3774 FEDORA:FEDORA-2010-18920  View
505661 46358 CVE-2010-3774 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052504.html  View
505662 46358 CVE-2010-3774 MANDRIVA:MDVSA-2010:251  View
505663 46358 CVE-2010-3774 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:251  View
505664 46358 CVE-2010-3774 REDHAT:RHSA-2010:0966  View
505665 46358 CVE-2010-3774 URL:http://www.redhat.com/support/errata/RHSA-2010-0966.html  View
505666 46358 CVE-2010-3774 SUSE:SUSE-SA:2011:003  View
505667 46358 CVE-2010-3774 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html  View
505668 46358 CVE-2010-3774 UBUNTU:USN-1019-1  View
505669 46358 CVE-2010-3774 URL:http://www.ubuntu.com/usn/USN-1019-1  View
505670 46358 CVE-2010-3774 OVAL:oval:org.mitre.oval:def:12512  View
505671 46358 CVE-2010-3774 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12512  View
505672 46358 CVE-2010-3774 SECTRACK:1024850  View
505673 46358 CVE-2010-3774 URL:http://www.securitytracker.com/id?1024850  View
505674 46358 CVE-2010-3774 SECUNIA:42716  View
505675 46358 CVE-2010-3774 URL:http://secunia.com/advisories/42716  View
505676 46358 CVE-2010-3774 SECUNIA:42818  View
505677 46358 CVE-2010-3774 URL:http://secunia.com/advisories/42818  View
505678 46358 CVE-2010-3774 VUPEN:ADV-2011-0030  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36789 JVNDB-2010-002569 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-3778 46358 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002569.html  View