CVE-2010-3773

Mozilla incomplete fix for CVE-2010-0179 (MFSA 2010-82)

Published Dec 10, 2010 CVSS 2.0 · 6.8 Medium EPSS 3.1% KEV · Not listed
Description
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2132-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2010-3752 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.
Ubuntu USN Ubuntu USN USN-1019-1 Firefox and Xulrunner vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:18 AM
Reserved
Oct 5, 2010, 12:00 AM
Status
Modified
Published
Dec 10, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:23 PM
Severity
Critical
Public date
Dec 9, 2010, 12:00 AM