Lucene search
Veracode Vulnerability DatabaseVERACODE:24172HistoryApr 10, 2020 - 12:48 a.m.
Information Disclosure
2020-04-1000:48:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
37
firefox
vulnerability
xmlhttprequest
information disclosure
remote site
private network
software
EPSS
0.012
Percentile
85.3%
firefox is vulnerable to information disclosure. A flaw was found in the Firefox XMLHttpRequest object. A remote site could use this flaw to gather information about servers on an internal private network.
Affected configurations
Node
-nsprMatch4.7.4_1.el4_7.1
OR-nsprMatch4.6.5_1.0.1.el5
OR-nsprMatch4.7.0.99.2_2.el4
OR-nsprMatch4.8.4_1.el5_4
OR-nsprMatch4.7.1_1.el5
OR-nsprMatch4.7.3_2.el5
OR-nsprMatch4.7.6_1.el5_4
OR-nsprMatch4.7.0.99.2_1.el5
OR-nsprMatch4.8.4_1.1.el4_8
OR-nsprMatch4.6.5_1.el5
OR-nsprMatch4.7.5_1.el5_4
OR-nsprMatch4.7.5_1.el4_8
OR-nsprMatch4.7.4_1.el4_8.1
OR-nsprMatch4.7.6_1.el4_8
OR-nsprMatch4.6.5_3.el5
OR-nsprMatch4.7.4_1.el5_2
OR-nsprMatch4.7.3_1.el4
OR-nsprMatch4.7.4_1.el5_3.1
OR-nsprMatch4.7.1_1.el4
ORfirefoxMatch3.0.1_1.el5
ORfirefoxMatch1.5.0.9_0.1.el4
ORfirefoxMatch1.5.0.5_0.el4.1
ORfirefoxMatch1.5.0.8_0.1.el4
ORfirefoxMatch3.0.5_1.el5_2
ORfirefoxMatch1.5.0.12_0.7.el4
ORfirefoxMatch3.0.1_1.el4
ORfirefoxMatch1.5.0.12_9.el5
ORfirefoxMatch3.0.18_1.el4
ORfirefoxMatch3.0.12_1.el5_3
ORfirefoxMatch1.5.0.12_0.8.el4
ORfirefoxMatch3.0.12_1.el4
ORfirefoxMatch3.6.7_2.el5
ORfirefoxMatch3.0.5_1.el4
ORfirefoxMatch1.5.0.12_0.21.el4
ORfirefoxMatch1.5.0.12_1.el5
ORfirefoxMatch3.0.9_1.el5
ORfirefoxMatch1.5.0.12_0.19.el4
ORfirefoxMatch1.5.0.12_0.3.el4
ORfirefoxMatch3.0.6_1.el4
ORfirefoxMatch3.0.4_1.el5
ORfirefoxMatch1.5.0.10_0.1.el4
ORfirefoxMatch3.0.10_1.el4
ORfirefoxMatch1.5.0.12_6.el5
ORfirefoxMatch3.0.7_1.el5
ORfirefoxMatch3.0.18_1.el5_4
ORfirefoxMatch3.0.16_1.el5_4
ORfirefoxMatch3.0.7_1.el4
ORfirefoxMatch1.5.0.12_15.el5_1
ORfirefoxMatch1.5.0.12_0.15.el4
ORfirefoxMatch3.6.4_8.el4
ORfirefoxMatch3.0.15_3.el5_4
ORfirefoxMatch1.5.0.12_0.10.el4
ORfirefoxMatch1.5.0.7_0.1.el4
ORfirefoxMatch1.5.0.9_10.el5
ORfirefoxMatch3.0.2_3.el4
ORfirefoxMatch3.0.1_3.el4
ORfirefoxMatch1.5.0.12_11.el5_1
ORfirefoxMatch3.0.14_1.el4
ORfirefoxMatch3.6.7_2.el4
ORfirefoxMatch3.0_0.beta5.6.el5
ORfirefoxMatch1.5.0.12_7.el5
ORfirefoxMatch3.0.11_4.el4
ORfirefoxMatch3.0.16_4.el4
ORfirefoxMatch3.0.19_1.el4
ORfirefoxMatch1.5.0.12_14.el5_1
ORfirefoxMatch1.5.0.12_3.el5
ORfirefoxMatch1.5.0.12_0.14.el4
ORfirefoxMatch3.0.15_3.el4
ORfirefoxMatch3.6.7_3.el5
ORfirefoxMatch1.5.0.12_0.1.el4
ORfirefoxMatch3.6.7_3.el4
ORfirefoxMatch3.0_2.el5
ORfirefoxMatch3.0.19_1.el5_5
ORfirefoxMatch3.0.14_1.el5_4
ORfirefoxMatch3.0.2_3.el5
ORfirefoxMatch3.0.6_1.el5
ORfirefoxMatch3.0.11_2.el5_3
ORfirefoxMatch3.0.7_3.el4
ORfirefoxMatch1.5.0.10_2.el5
ORfirefoxMatch3.0.9_1.el4
ORfirefoxMatch3.0.4_1.el4
ORfirefoxMatch3.6.4_8.el5
ORfirefoxMatch3.0.10_1.el5
OR-xulrunnerMatch1.9.2.4_9.el5
OR-xulrunnerMatch1.9_1.el5
OR-xulrunnerMatch1.9.0.7_1.el5
OR-xulrunnerMatch1.9.0.4_1.el5
OR-xulrunnerMatch1.9.0.10_1.el5
OR-xulrunnerMatch1.9.0.5_1.el5_2
OR-xulrunnerMatch1.9.0.9_1.el5
OR-xulrunnerMatch1.9.0.16_2.el5_4
OR-xulrunnerMatch1.9.0.1_1.el5
OR-xulrunnerMatch1.9.0.18_1.el5_4
OR-xulrunnerMatch1.9_0.beta5.6.el5
OR-xulrunnerMatch1.9.0.6_1.el5
OR-xulrunnerMatch1.9.2.7_2.el5
OR-xulrunnerMatch1.9.0.14_1.el5_4
OR-xulrunnerMatch1.9.0.11_3.el5_3
OR-xulrunnerMatch1.9.0.12_1.el5_3
OR-xulrunnerMatch1.9.0.15_3.el5_4
OR-xulrunnerMatch1.9.2.7_3.el5
OR-xulrunnerMatch1.9.0.19_1.el5_5
OR-xulrunnerMatch1.9.0.2_5.el5
OR-xulrunnerMatch1.9.0.7_3.el5
ORnssMatch3.12.2.0_1.el4
ORnssMatch3.12.2.0_4.el5
ORnssMatch3.12.6_2.el5_5
ORnssMatch3.12.3.99.3_1.el4_8.2
ORnssMatch3.12.6_2.el4_8
ORnssMatch3.12.0.3_1.el5
ORnssMatch3.11.99.5_3.el4
ORnssMatch3.12.3.99.3_1.el5_2
ORnssMatch3.12.1.1_3.el5
ORnssMatch3.12.1.1_1.el5
ORnssMatch3.12.1.1_1.el4
ORnssMatch3.11.5_3.el5
ORnssMatch3.12.1.1_3.el4
ORnssMatch3.12.2.0_2.el5
ORnssMatch3.11.99.5_2.el5
ORnssMatch3.12.3.99.3_1.el5_3.2
ORnssMatch3.12.2.0_3.el4
ORnssMatch3.11.5_1.el5
ORnssMatch3.11.7_1.3.el5
ORnssMatch3.12.6_1.el4_8
ORnssMatch3.12.2.0_4.el4
ORnssMatch3.12.3.99.3_1.el4_7.6
ORnssMatch3.12.6_1.el5_4
OR-nsprMatch4.7.4_1.el4_7.1
OR-nsprMatch4.6.5_1.0.1.el5
OR-nsprMatch4.7.0.99.2_2.el4
OR-nsprMatch4.8.4_1.el5_4
OR-nsprMatch4.7.1_1.el5
OR-nsprMatch4.7.3_2.el5
OR-nsprMatch4.7.6_1.el5_4
OR-nsprMatch4.7.0.99.2_1.el5
OR-nsprMatch4.8.4_1.1.el4_8
OR-nsprMatch4.6.5_1.el5
OR-nsprMatch4.7.5_1.el5_4
OR-nsprMatch4.7.5_1.el4_8
OR-nsprMatch4.7.4_1.el4_8.1
OR-nsprMatch4.7.6_1.el4_8
OR-nsprMatch4.6.5_3.el5
OR-nsprMatch4.7.4_1.el5_2
OR-nsprMatch4.7.3_1.el4
OR-nsprMatch4.7.4_1.el5_3.1
OR-nsprMatch4.7.1_1.el4
ORfirefoxMatch3.0.1_1.el5
ORfirefoxMatch1.5.0.9_0.1.el4
ORfirefoxMatch1.5.0.5_0.el4.1
ORfirefoxMatch1.5.0.8_0.1.el4
ORfirefoxMatch3.0.5_1.el5_2
ORfirefoxMatch1.5.0.12_0.7.el4
ORfirefoxMatch3.0.1_1.el4
ORfirefoxMatch1.5.0.12_9.el5
ORfirefoxMatch3.0.18_1.el4
ORfirefoxMatch3.0.12_1.el5_3
ORfirefoxMatch1.5.0.12_0.8.el4
ORfirefoxMatch3.0.12_1.el4
ORfirefoxMatch3.6.7_2.el5
ORfirefoxMatch3.0.5_1.el4
ORfirefoxMatch1.5.0.12_0.21.el4
ORfirefoxMatch1.5.0.12_1.el5
ORfirefoxMatch3.0.9_1.el5
ORfirefoxMatch1.5.0.12_0.19.el4
ORfirefoxMatch1.5.0.12_0.3.el4
ORfirefoxMatch3.0.6_1.el4
ORfirefoxMatch3.0.4_1.el5
ORfirefoxMatch1.5.0.10_0.1.el4
ORfirefoxMatch3.0.10_1.el4
ORfirefoxMatch1.5.0.12_6.el5
ORfirefoxMatch3.0.7_1.el5
ORfirefoxMatch3.0.18_1.el5_4
ORfirefoxMatch3.0.16_1.el5_4
ORfirefoxMatch3.0.7_1.el4
ORfirefoxMatch1.5.0.12_15.el5_1
ORfirefoxMatch1.5.0.12_0.15.el4
ORfirefoxMatch3.6.4_8.el4
ORfirefoxMatch3.0.15_3.el5_4
ORfirefoxMatch1.5.0.12_0.10.el4
ORfirefoxMatch1.5.0.7_0.1.el4
ORfirefoxMatch1.5.0.9_10.el5
ORfirefoxMatch3.0.2_3.el4
ORfirefoxMatch3.0.1_3.el4
ORfirefoxMatch1.5.0.12_11.el5_1
ORfirefoxMatch3.0.14_1.el4
ORfirefoxMatch3.6.7_2.el4
ORfirefoxMatch3.0_0.beta5.6.el5
ORfirefoxMatch1.5.0.12_7.el5
ORfirefoxMatch3.0.11_4.el4
ORfirefoxMatch3.0.16_4.el4
ORfirefoxMatch3.0.19_1.el4
ORfirefoxMatch1.5.0.12_14.el5_1
ORfirefoxMatch1.5.0.12_3.el5
ORfirefoxMatch1.5.0.12_0.14.el4
ORfirefoxMatch3.0.15_3.el4
ORfirefoxMatch3.6.7_3.el5
ORfirefoxMatch1.5.0.12_0.1.el4
ORfirefoxMatch3.6.7_3.el4
ORfirefoxMatch3.0_2.el5
ORfirefoxMatch3.0.19_1.el5_5
ORfirefoxMatch3.0.14_1.el5_4
ORfirefoxMatch3.0.2_3.el5
ORfirefoxMatch3.0.6_1.el5
ORfirefoxMatch3.0.11_2.el5_3
ORfirefoxMatch3.0.7_3.el4
ORfirefoxMatch1.5.0.10_2.el5
ORfirefoxMatch3.0.9_1.el4
ORfirefoxMatch3.0.4_1.el4
ORfirefoxMatch3.6.4_8.el5
ORfirefoxMatch3.0.10_1.el5
OR-xulrunnerMatch1.9.2.4_9.el5
OR-xulrunnerMatch1.9_1.el5
OR-xulrunnerMatch1.9.0.7_1.el5
OR-xulrunnerMatch1.9.0.4_1.el5
OR-xulrunnerMatch1.9.0.10_1.el5
OR-xulrunnerMatch1.9.0.5_1.el5_2
OR-xulrunnerMatch1.9.0.9_1.el5
OR-xulrunnerMatch1.9.0.16_2.el5_4
OR-xulrunnerMatch1.9.0.1_1.el5
OR-xulrunnerMatch1.9.0.18_1.el5_4
OR-xulrunnerMatch1.9_0.beta5.6.el5
OR-xulrunnerMatch1.9.0.6_1.el5
OR-xulrunnerMatch1.9.2.7_2.el5
OR-xulrunnerMatch1.9.0.14_1.el5_4
OR-xulrunnerMatch1.9.0.11_3.el5_3
OR-xulrunnerMatch1.9.0.12_1.el5_3
OR-xulrunnerMatch1.9.0.15_3.el5_4
OR-xulrunnerMatch1.9.2.7_3.el5
OR-xulrunnerMatch1.9.0.19_1.el5_5
OR-xulrunnerMatch1.9.0.2_5.el5
OR-xulrunnerMatch1.9.0.7_3.el5
ORnssMatch3.12.2.0_1.el4
ORnssMatch3.12.2.0_4.el5
ORnssMatch3.12.6_2.el5_5
ORnssMatch3.12.3.99.3_1.el4_8.2
ORnssMatch3.12.6_2.el4_8
ORnssMatch3.12.0.3_1.el5
ORnssMatch3.11.99.5_3.el4
ORnssMatch3.12.3.99.3_1.el5_2
ORnssMatch3.12.1.1_3.el5
ORnssMatch3.12.1.1_1.el5
ORnssMatch3.12.1.1_1.el4
ORnssMatch3.11.5_3.el5
ORnssMatch3.12.1.1_3.el4
ORnssMatch3.12.2.0_2.el5
ORnssMatch3.11.99.5_2.el5
ORnssMatch3.12.3.99.3_1.el5_3.2
ORnssMatch3.12.2.0_3.el4
ORnssMatch3.11.5_1.el5
ORnssMatch3.11.7_1.3.el5
ORnssMatch3.12.6_1.el4_8
ORnssMatch3.12.2.0_4.el4
ORnssMatch3.12.3.99.3_1.el4_7.6
ORnssMatch3.12.6_1.el5_4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | nspr | 4.7.4_1.el4_7.1 | cpe:2.3:a:-:nspr:4.7.4_1.el4_7.1:*:*:*:*:*:*:* |
| - | nspr | 4.6.5_1.0.1.el5 | cpe:2.3:a:-:nspr:4.6.5_1.0.1.el5:*:*:*:*:*:*:* |
| - | nspr | 4.7.0.99.2_2.el4 | cpe:2.3:a:-:nspr:4.7.0.99.2_2.el4:*:*:*:*:*:*:* |
| - | nspr | 4.8.4_1.el5_4 | cpe:2.3:a:-:nspr:4.8.4_1.el5_4:*:*:*:*:*:*:* |
| - | nspr | 4.7.1_1.el5 | cpe:2.3:a:-:nspr:4.7.1_1.el5:*:*:*:*:*:*:* |
| - | nspr | 4.7.3_2.el5 | cpe:2.3:a:-:nspr:4.7.3_2.el5:*:*:*:*:*:*:* |
| - | nspr | 4.7.6_1.el5_4 | cpe:2.3:a:-:nspr:4.7.6_1.el5_4:*:*:*:*:*:*:* |
| - | nspr | 4.7.0.99.2_1.el5 | cpe:2.3:a:-:nspr:4.7.0.99.2_1.el5:*:*:*:*:*:*:* |
| - | nspr | 4.8.4_1.1.el4_8 | cpe:2.3:a:-:nspr:4.8.4_1.1.el4_8:*:*:*:*:*:*:* |
| - | nspr | 4.6.5_1.el5 | cpe:2.3:a:-:nspr:4.6.5_1.el5:*:*:*:*:*:*:* |
References
blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html
lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html
secunia.com/advisories/42867
support.avaya.com/css/P8/documents/100112690
www.mandriva.com/security/advisories?name=MDVSA-2010:173
www.mozilla.org/security/announce/2010/mfsa2010-63.html
www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.9
www.redhat.com/security/updates/classification/#critical
www.securityfocus.com/bid/43104
www.vupen.com/english/advisories/2010/2323
www.vupen.com/english/advisories/2011/0061
access.redhat.com/errata/RHSA-2010:0681
bugzilla.mozilla.org/show_bug.cgi?id=552090
exchange.xforce.ibmcloud.com/vulnerabilities/61662
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11684
Related
cvelist
cvelist
CVE-2010-2764
2010-09-09 18:00:00
mozilla
mozilla
Information leak via XMLHttpRequest statusText — Mozilla
2010-09-07 00:00:00
nvd
nvd
CVE-2010-2764
2010-09-09 19:00:02
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-63
2010-09-10 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-09-16 00:00:00
cve
cve
CVE-2010-2764
2010-09-09 19:00:02
prion
prion
Cross site scripting
2010-09-09 19:00:00
ubuntucve
ubuntucve
CVE-2010-2764
2010-09-07 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (MFSA2010-51, MFSA2010-54, MFSA2010-56, MFSA2010-57) - Windows
2010-09-10 00:00:00
Mozilla Products Multiple Vulnerabilities sep-10 (Windows)
2010-09-10 00:00:00
Ubuntu Update for thunderbird vulnerabilities USN-978-1
2010-09-10 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.1, xulrunner-1.9.2 regression (USN-975-2)
2010-09-17 00:00:00
Oracle Linux 5 : firefox (ELSA-2010-0681)
2013-07-12 00:00:00
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
ubuntu
ubuntu
Thunderbird regression
2010-09-16 00:00:00
Firefox and Xulrunner vulnerabilities
2010-09-08 00:00:00
Thunderbird vulnerabilities
2010-09-08 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: perl-Gtk2-MozEmbed-0.08-6.fc12.15
2010-09-09 01:23:44
[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-9.fc12
2010-09-09 01:23:44
[SECURITY] Fedora 12 Update: gnome-python2-extras-2.25.3-20.fc12
2010-09-09 01:23:44
centos
centos
firefox, nspr, nss, xulrunner security update
2010-09-08 22:50:48
osv
osv
Red Hat Security Advisory: firefox security update
2024-09-29 16:29:13
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00
MozillaFirefox-50.1.0-1.1 on GA media
2024-06-15 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-09-08 00:00:00
redhat
redhat
(RHSA-2010:0681) Critical: firefox security update
2010-09-07 00:00:00
debian
debian
BSA-002 Security Update for iceweasel
2010-09-29 06:47:29
BSA-002 Security Update for iceweasel
2010-09-29 06:47:13
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-09-07 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-10-12 16:13:47
remote code execution in MozillaFirefox,seamonkey,MozillaThunderbird
2010-11-08 11:27:17
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00