Lucene search
RootSSV:19988HistoryJul 27, 2010 - 12:00 a.m.
Mozilla Firefox importScripts()方式跨域信息泄露漏洞
2010-07-2700:00:00
Root
www.seebug.org
17
0.002 Low
EPSS
Percentile
58.3%
BUGTRAQ ID: 41871
CVE ID: CVE-2010-1213
Firefox是一款流行的开源WEB浏览器。
即使内容不是有效的JavaScript，Web Worker方式importScripts也会从其他域读取和解析资源。这破坏了同源策略，可能允许攻击者从其他站点窃取敏感信息。
Mozilla Firefox 3.6.x
Mozilla Firefox 3.5.x
Mozilla Thunderbird 3.1.x
Mozilla Thunderbird 3.0.x
Mozilla SeaMonkey < 2.0.6
厂商补丁：
Mozilla
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2010:0547-01）以及相应补丁:
RHSA-2010:0547-01：Critical: firefox security update
链接：https://www.redhat.com/support/errata/RHSA-2010-0547.html
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-42
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:46:10
cvelist
cvelist
CVE-2010-1213
2010-07-30 20:00:00
cve
cve
CVE-2010-1213
2010-07-30 20:30:00
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
ubuntucve
ubuntucve
CVE-2010-1213
2010-07-23 00:00:00
mozilla
mozilla
Cross-origin data disclosure via Web Workers and importScripts — Mozilla
2010-07-20 00:00:00
openvas
openvas
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
Mozilla Products Multiple Vulnerabilities jul-10 (Windows)
2010-07-26 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:169)
2010-09-03 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2014-06-13 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2010-07-28 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: seamonkey-2.0.6-1.fc12
2010-07-23 02:43:20
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00