The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, generates different exception messages depending on whether the referenced COM object is listed in the registry, which allows remote attackers to obtain potentially sensitive information about installed software by making multiple calls that specify the ProgID values of different COM objects.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/37699 | third-party-advisory x_refsource_SECUNIA |
| https://bugzilla.mozilla.org/show_bug.cgi?id=503451 | x_refsource_CONFIRM |
| http://www.vupen.com/english/advisories/2009/3547 | vdb-entry x_refsource_VUPEN |
| http://secunia.com/advisories/37785 | third-party-advisory x_refsource_SECUNIA |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7958 | vdb-entry signature x_refsource_OVAL |
| https://bugzilla.redhat.com/show_bug.cgi?id=546729 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/37349 | vdb-entry x_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54798 | vdb-entry x_refsource_XF |
| http://securitytracker.com/id?1023347 | vdb-entry x_refsource_SECTRACK |
| http://www.securityfocus.com/bid/37360 | vdb-entry x_refsource_BID |
| http://securitytracker.com/id?1023346 | vdb-entry x_refsource_SECTRACK |
| http://www.mozilla.org/security/announce/2009/mfsa2009-71.html | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|