CVE-2002-2437

The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values…

published December 7, 2011

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01224 · 68.4th percentile
Published
2011-12-07T19:00Z
EPSS history
Timeline
  • 07 DEC 19:00Z
    The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values…
    cvelistv5