defaultValue security checks not applied — Mozilla

🗓️ 11 Oct 2012 00:00:00Reported by Mozilla FoundationType

mozilla

mozilla🔗 www.mozilla.org👁 42 Views

defaultValue security checks regression in Mozill

Reporter	Title	Published	Views	Family All 114
IBM Security Bulletins	Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
Tenable Nessus	Mozilla Firefox < 16.0 Multiple Vulnerabilities	16 Oct 201200:00	–	nessus
Tenable Nessus	SeaMonkey 2.x < 2.13 Multiple Vulnerabilities	16 Oct 201200:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 16.0.1 Multiple Vulnerabilities	16 Oct 201200:00	–	nessus
Tenable Nessus	Mozilla SeaMonkey 2.x < 2.13 Multiple Vulnerabilities	16 Oct 201200:00	–	nessus
Tenable Nessus	Mozilla Thunderbird 15.x <= 15 Multiple Vulnerabilities	16 Oct 201200:00	–	nessus
Tenable Nessus	Mozilla Firefox 15.x <= 15 Multiple Vulnerabilities	16 Oct 201200:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : xulrunner (CESA-2012:1361)	15 Oct 201200:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : thunderbird (CESA-2012:1362)	15 Oct 201200:00	–	nessus

Vulners

Node

mozilla firefoxRange<16.0.1

OR

mozilla firefoxRange<10.0.9esr

OR

mozilla seamonkeyRange<2.13.1

OR

mozilla thunderbirdRange<16.0.1

OR

mozilla thunderbirdRange<10.0.9esr

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
thespanner	www.thespanner.co.uk/2012/10/10/firefox-knows-what-your-friends-did-last-summer/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

11 Oct 2012 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 26.8

EPSS0.01406

mozilla security wrappers regression defaultvalue location object arbitrary code execution software