Lucene search
RootSSV:19987HistoryJul 27, 2010 - 12:00 a.m.
Firefox CSS选择器跨域信息泄露漏洞
2010-07-2700:00:00
Root
www.seebug.org
27
0.006 Low
EPSS
Percentile
75.6%
BUGTRAQ ID: 41872
CVE ID: CVE-2010-0654
Firefox是一款流行的开源WEB浏览器。
如果攻击者能够向目标页的A和B两点之间注入CSS选择器的开放和关闭部分，用户就可以通过getComputedStyle() API读取两个注入点之间的部分。
Mozilla Firefox 3.6.x
Mozilla Firefox 3.5.x
Mozilla Thunderbird 3.1.x
Mozilla Thunderbird 3.0.x
Mozilla SeaMonkey < 2.0.6
厂商补丁：
Mozilla
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2010:0547-01）以及相应补丁:
RHSA-2010:0547-01：Critical: firefox security update
链接：https://www.redhat.com/support/errata/RHSA-2010-0547.html
Related
prion
prion
Design/Logic Flaw
2010-02-18 18:00:00
ubuntucve
ubuntucve
CVE-2010-0654
2010-02-18 00:00:00
mozilla
mozilla
Cross-domain data theft using CSS — Mozilla
2010-07-20 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-46
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:46:02
cve
cve
CVE-2010-0654
2010-02-18 18:00:00
openvas
openvas
Firefox Multiple Vulnerabilities (Feb 2010) - Windows
2010-02-22 00:00:00
Firefox Multiple Vulnerabilities Feb-10 (Windows)
2010-02-22 00:00:00
Firefox Multiple Vulnerabilities Feb-10 (Linux)
2010-02-22 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:169)
2010-09-03 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2010-07-28 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2014-06-13 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
xulrunner - several vulnerabilities
2010-11-01 00:00:00
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:58
[SECURITY] [DSA 2124-1] New Xulrunner packages fix several vulnerabilities
2010-11-01 20:38:47
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: seamonkey-2.0.6-1.fc12
2010-07-23 02:43:20
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00