Lucene search
Mozilla FoundationMFSA2010-47HistoryJul 20, 2010 - 12:00 a.m.
Cross-origin data leakage from script filename in error messages — Mozilla
2010-07-2000:00:00
Mozilla Foundation
www.mozilla.org
18
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
68.2%
Security researcher Soroush Dalili reported that potentially sensitive URL parameters could be leaked across domains upon script errors when the script filename and line number is included in the error message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 3.5.11 | |
| firefox | lt | 3.6.7 | |
| seamonkey | lt | 2.0.6 | |
| thunderbird | lt | 3.0.6 | |
| thunderbird | lt | 3.1.1 |
Related
prion
prion
Design/Logic Flaw
2010-07-30 13:26:00
cve
cve
CVE-2010-2754
2010-07-30 13:26:00
ubuntucve
ubuntucve
CVE-2010-2754
2010-07-23 00:00:00
seebug
seebug
Mozilla Firefox出错消息脚本文件名信息泄露漏洞
2010-07-27 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-47
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:45:43
oraclelinux
oraclelinux
seamonkey security update
2010-07-21 00:00:00
thunderbird security update
2010-07-21 00:00:00
firefox security update
2010-07-21 00:00:00
nessus
nessus
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:169)
2010-09-03 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2010-07-28 00:00:00
openvas
openvas
CentOS Update for seamonkey CESA-2010:0546 centos3 i386
2010-08-20 00:00:00
CentOS Update for seamonkey CESA-2010:0546 centos3 i386
2010-08-20 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
redhat
redhat
(RHSA-2010:0546) Critical: seamonkey security update
2010-07-20 00:00:00
(RHSA-2010:0544) Moderate: thunderbird security update
2010-07-20 00:00:00
(RHSA-2010:0545) Critical: thunderbird security update
2010-07-20 00:00:00
centos
centos
seamonkey security update
2010-08-16 21:36:58
thunderbird security update
2010-08-06 23:32:55
thunderbird security update
2010-07-22 14:50:56
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:58
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-8.fc12
2010-07-23 02:47:25
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
68.2%
Related for MFSA2010-47