NVD

Id
11737  
Name
CVE-2010-0162  
Description
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-02-22  
Modified Date
2010-08-21  
Seq
2010-0162  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64458 11737 CVE-2010-0162 FEDORA-2010-1932  View
64459 11737 CVE-2010-0162 FEDORA-2010-1936  View
64460 11737 CVE-2010-0162 FEDORA-2010-1727  View
64461 11737 CVE-2010-0162 SUSE-SA:2010:015  View
64462 11737 CVE-2010-0162 oval:org.mitre.oval:def:10697  View
64463 11737 CVE-2010-0162 oval:org.mitre.oval:def:8631  View
64464 11737 CVE-2010-0162 DSA-1999  View
64465 11737 CVE-2010-0162 MDVSA-2010:042  View
64466 11737 CVE-2010-0162 http://www.mozilla.org/security/announce/2010/mfsa2010-05.html  View
64467 11737 CVE-2010-0162 RHSA-2010:0112  View
64468 11737 CVE-2010-0162 USN-895-1  View
64469 11737 CVE-2010-0162 USN-896-1  View
64470 11737 CVE-2010-0162 ADV-2010-0405  View
64471 11737 CVE-2010-0162 mozilla-svg-xss(56363)  View
64472 11737 CVE-2010-0162 https://bugzilla.mozilla.org/show_bug.cgi?id=455472  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35352 JVNDB-2010-001132 Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 Mozilla Firefox/SeaMonkey には、SVG または EMBED エレメントを伴う特定の状況において、Web スクリプトの実行に対する保護メカニズムとして application/octet-stream コンテンツタイプを適切にサポートしないため、同一生成元ポリシーを回避され、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2010-0162 42742 CVE-2010-0162 11737 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001132.html 2010-02-17 2010-03-09 View