The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2008-5913.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-09-15T19:00:00
Updated: 2024-08-07T03:11:43.389Z
Reserved: 2010-09-15T00:00:00
Link: CVE-2010-3400
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-09-15T20:00:02.790
Modified: 2024-11-21T01:18:38.620
Link: CVE-2010-3400
Redhat
No data.