CVE-2010-0179

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not…

published April 5, 2010

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03275 · 88.3th percentile
Published
2010-04-05T17:00Z
EPSS history
Timeline
  • 05 APR 17:00Z
    Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not…
    cvelistv5