9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.012 Low
EPSS
Percentile
85.4%
Mozilla community member Alice White reported that when the GetProperty function is invoked through JSAPI, security checking can be bypassed when getting cross-origin properties. This potentially allowed for arbitrary code execution.
CPE | Name | Operator | Version |
---|---|---|---|
firefox | lt | 16 | |
firefox esr | lt | 10.0.8 | |
seamonkey | lt | 2.13 | |
thunderbird | lt | 16 | |
thunderbird esr | lt | 10.0.8 |