NVD

Id
14207  
Name
CVE-2010-2764  
Description
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-09  
Modified Date
2011-07-18  
Seq
2010-2764  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78534 14207 CVE-2010-2764 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
78535 14207 CVE-2010-2764 FEDORA-2010-14362  View
78536 14207 CVE-2010-2764 SUSE-SA:2010:049  View
78537 14207 CVE-2010-2764 oval:org.mitre.oval:def:11684  View
78538 14207 CVE-2010-2764 http://support.avaya.com/css/P8/documents/100112690  View
78539 14207 CVE-2010-2764 MDVSA-2010:173  View
78540 14207 CVE-2010-2764 http://www.mozilla.org/security/announce/2010/mfsa2010-63.html  View
78541 14207 CVE-2010-2764 43104  View
78542 14207 CVE-2010-2764 ADV-2010-2323  View
78543 14207 CVE-2010-2764 ADV-2011-0061  View
78544 14207 CVE-2010-2764 firefox-xmlhttprequest-info-disclosure(61662)  View
78545 14207 CVE-2010-2764 https://bugzilla.mozilla.org/show_bug.cgi?id=552090  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36293 JVNDB-2010-002073 複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性 複数の Mozilla 製品には、XMLHttpRequest オブジェクトの statusText プロパティへの読み込みアクセス権を適切に制限しないため、イントラネット上の Web サーバの存在を発見される脆弱性が存在します。 CVE-2010-2764 45344 CVE-2010-2764 14207 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002073.html 2010-09-07 2011-05-17 View