ByteOS Network

CVE Vulnerability Details :

CVE-2010-3178

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-21 Oct, 2010 | 18:12

Updated At-07 Aug, 2024 | 03:03

▼CVE Numbering Authority (CNA)

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.mozilla.org/security/announce/2010/mfsa2010-69.html	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2010-0782.html	vendor-advisory x_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=576616	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2010-0896.html	vendor-advisory x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2010:210	vendor-advisory x_refsource_MANDRIVA
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox	x_refsource_CONFIRM
http://secunia.com/advisories/42867	third-party-advisory x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2010:211	vendor-advisory x_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2011/0061	vdb-entry x_refsource_VUPEN
http://www.ubuntu.com/usn/USN-998-1	vendor-advisory x_refsource_UBUNTU
http://www.debian.org/security/2010/dsa-2124	vendor-advisory x_refsource_DEBIAN
http://support.avaya.com/css/P8/documents/100120156	x_refsource_CONFIRM
http://www.securityfocus.com/bid/44252	vdb-entry x_refsource_BID
http://www.ubuntu.com/usn/USN-997-1	vendor-advisory x_refsource_UBUNTU
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12120	vdb-entry signature x_refsource_OVAL
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html	vendor-advisory x_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2010-0861.html	vendor-advisory x_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html	vendor-advisory x_refsource_FEDORA

Hyperlink: http://www.mozilla.org/security/announce/2010/mfsa2010-69.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0782.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=576616

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0896.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:210

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/42867

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:211

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.vupen.com/english/advisories/2011/0061

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.ubuntu.com/usn/USN-998-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.debian.org/security/2010/dsa-2124

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://support.avaya.com/css/P8/documents/100120156

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/44252

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.ubuntu.com/usn/USN-997-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12120

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0861.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html

Resource:

vendor-advisory

x_refsource_FEDORA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.mozilla.org/security/announce/2010/mfsa2010-69.html	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0782.html	vendor-advisory x_refsource_REDHAT x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=576616	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0896.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2010:210	vendor-advisory x_refsource_MANDRIVA x_transferred
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/42867	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2010:211	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.vupen.com/english/advisories/2011/0061	vdb-entry x_refsource_VUPEN x_transferred
http://www.ubuntu.com/usn/USN-998-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.debian.org/security/2010/dsa-2124	vendor-advisory x_refsource_DEBIAN x_transferred
http://support.avaya.com/css/P8/documents/100120156	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/44252	vdb-entry x_refsource_BID x_transferred
http://www.ubuntu.com/usn/USN-997-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12120	vdb-entry signature x_refsource_OVAL x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0861.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html	vendor-advisory x_refsource_FEDORA x_transferred