CVE-2010-2762

🗓️ 09 Sep 2010 18:00:00Reported by mitreType

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, allowing remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object

Reporter	Title	Published	Views	Family All 85
FreeBSD	mozilla -- multiple vulnerabilities	7 Sep 201000:00	–	freebsd
Tenable Nessus	Mozilla Firefox 3.6.x < 3.6.9 Multiple Vulnerabilities	8 Sep 201000:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 3.1.3 Multiple Vulnerabilities	8 Sep 201000:00	–	nessus
Tenable Nessus	Firefox 3.6.x < 3.6.9 Multiple Vulnerabilities	8 Sep 201000:00	–	nessus
Tenable Nessus	CentOS 4 / 5 : firefox (CESA-2010:0681)	12 Sep 201000:00	–	nessus
Tenable Nessus	CentOS 4 / 5 : thunderbird (CESA-2010:0682)	12 Sep 201000:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (4a21ce2c-bb13-11df-8e32-000f20797ede)	9 Sep 201000:00	–	nessus
Tenable Nessus	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	8 Jan 201300:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : firefox (MDVSA-2010:173)	12 Sep 201000:00	–	nessus
Tenable Nessus	MiracleLinux 3 : firefox-3.6.9-2.0.1.AXS3, nspr-4.8.6-1.AXS3, nss-3.12.7-2.AXS3, xulrunner-1.9.2.9-1.0.1.AXS3 (AXSA:2010-445:06)	14 Jan 202600:00	–	nessus

NVD

Node

mozilla firefoxMatch3.6

mozilla firefoxMatch3.6.2

mozilla firefoxMatch3.6.3

mozilla firefoxMatch3.6.4

mozilla firefoxMatch3.6.6

mozilla firefoxMatch3.6.7

mozilla firefoxMatch3.6.8

Node

mozilla thunderbirdMatch3.1

mozilla thunderbirdMatch3.1.1

mozilla thunderbirdMatch3.1.2

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/61656
mozilla	www.mozilla.org/security/announce/2010/mfsa2010-59.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11492
mandriva	www.mandriva.com/security/advisories
lists	www.lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html
vupen	www.vupen.com/english/advisories/2010/2323
securityfocus	www.securityfocus.com/bid/43092
support	www.support.avaya.com/css/P8/documents/100112690
secunia	www.secunia.com/advisories/42867
blogs	www.blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

29 Apr 2026 01:13Current

8.4High risk

Vulners AI Score8.4

CVSS 26.8

EPSS0.0174

CWE-264