Lucene search

[email protected]CVE-2010-2751

HistoryJul 30, 2010 - 8:30 p.m.

CVE-2010-2751

2010-07-3020:30:02

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-2751

mozilla firefox

seamonkey

ssl

security

spoofing

redirect

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

8.9

Confidence

High

EPSS

0.003

Percentile

68.8%

JSON

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.

Affected configurations

NVD

Node

mozillafirefoxMatch3.5.1

mozillafirefoxMatch3.5.2

mozillafirefoxMatch3.5.3

mozillafirefoxMatch3.5.4

mozillafirefoxMatch3.5.5

mozillafirefoxMatch3.5.6

mozillafirefoxMatch3.5.7

mozillafirefoxMatch3.5.9

mozillafirefoxMatch3.5.10

mozillafirefoxMatch3.6.1

mozillafirefoxMatch3.6.2

mozillafirefoxMatch3.6.3

mozillafirefoxMatch3.6.4

mozillafirefoxMatch3.6.6

Node

mozillaseamonkeyRange≤2.0.5

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0alpha

mozillaseamonkeyMatch1.0beta

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.4

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1alpha

mozillaseamonkeyMatch1.1beta

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillaseamonkeyMatch1.1.14

mozillaseamonkeyMatch1.1.15

mozillaseamonkeyMatch1.1.16

mozillaseamonkeyMatch1.1.17

mozillaseamonkeyMatch1.1.18

mozillaseamonkeyMatch1.1.19

mozillaseamonkeyMatch1.5.0.8

mozillaseamonkeyMatch1.5.0.9

mozillaseamonkeyMatch1.5.0.10

mozillaseamonkeyMatch2.0

mozillaseamonkeyMatch2.0alpha_1

mozillaseamonkeyMatch2.0alpha_2

mozillaseamonkeyMatch2.0alpha_3

mozillaseamonkeyMatch2.0beta_1

mozillaseamonkeyMatch2.0beta_2

mozillaseamonkeyMatch2.0rc1

mozillaseamonkeyMatch2.0rc2

mozillaseamonkeyMatch2.0.1

mozillaseamonkeyMatch2.0.2

mozillaseamonkeyMatch2.0.3

mozillaseamonkeyMatch2.0.4

mozillaseamonkeyMatch2.0a1pre

VendorProductVersionCPE
mozillafirefox3.5.1cpe:/a:mozilla:firefox:3.5.1:::
mozillafirefox3.5.6cpe:/a:mozilla:firefox:3.5.6:::
mozillafirefox3.6.3cpe:/a:mozilla:firefox:3.6.3:::
mozillafirefox3.5.9cpe:/a:mozilla:firefox:3.5.9:::
mozillafirefox3.5.7cpe:/a:mozilla:firefox:3.5.7:::
mozillafirefox3.5.5cpe:/a:mozilla:firefox:3.5.5:::
mozillafirefox3.6.4cpe:/a:mozilla:firefox:3.6.4:::
mozillafirefox3.6.6cpe:/a:mozilla:firefox:3.6.6:::
mozillafirefox3.6.1cpe:/a:mozilla:firefox:3.6.1:::
mozillafirefox3.5.4cpe:/a:mozilla:firefox:3.5.4:::

Vendor	Product	Version	CPE
mozilla	firefox	3.5.1	cpe:/a:mozilla:firefox:3.5.1:::
mozilla	firefox	3.5.6	cpe:/a:mozilla:firefox:3.5.6:::
mozilla	firefox	3.6.3	cpe:/a:mozilla:firefox:3.6.3:::
mozilla	firefox	3.5.9	cpe:/a:mozilla:firefox:3.5.9:::
mozilla	firefox	3.5.7	cpe:/a:mozilla:firefox:3.5.7:::
mozilla	firefox	3.5.5	cpe:/a:mozilla:firefox:3.5.5:::
mozilla	firefox	3.6.4	cpe:/a:mozilla:firefox:3.6.4:::
mozilla	firefox	3.6.6	cpe:/a:mozilla:firefox:3.6.6:::
mozilla	firefox	3.6.1	cpe:/a:mozilla:firefox:3.6.1:::
mozilla	firefox	3.5.4	cpe:/a:mozilla:firefox:3.5.4:::