NVD

Id
13105  
Name
CVE-2010-1585  
Description
The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-04-28  
Modified Date
2017-01-06  
Seq
2010-1585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72373 13105 CVE-2010-1585 http://downloads.avaya.com/css/P8/documents/100133195  View
72374 13105 CVE-2010-1585 oval:org.mitre.oval:def:12532  View
72375 13105 CVE-2010-1585 http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/  View
72376 13105 CVE-2010-1585 MDVSA-2011:041  View
72377 13105 CVE-2010-1585 MDVSA-2011:042  View
72378 13105 CVE-2010-1585 http://www.mozilla.org/security/announce/2011/mfsa2011-08.html  View
72379 13105 CVE-2010-1585 http://www.security-assessment.com/files/whitepapers/Cross_Context_Scripting_with_Firefox.pdf  View
72380 13105 CVE-2010-1585 20100421 Security-Assessment.com WhitePaper/Addendum: Cross Context Scripting with Firefox & Exploiting Cross Context Scripting vulnerabilities in Firefox  View
72381 13105 CVE-2010-1585 https://bugzilla.mozilla.org/show_bug.cgi?id=562547  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31056 JVNDB-2011-001295 複数の Mozilla 製品の nsIScriptableUnescapeHTML.parseFragment メソッドにおける 任意の JavaScript を実行される脆弱性 複数の Mozilla 製品の ParanoidFragmentSink 保護メカニズム内にある nsIScriptableUnescapeHTML.parseFragment メソッドは、chrome ドキュメント内の HTML を適切にサニタイズしないため、Chrome 特権が付与された任意の JavaScript を実行される脆弱性が存在します。 CVE-2010-1585 44165 CVE-2010-1585 13105 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001295.html 2011-03-01 2011-03-28 View