CVE-2010-0654

Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit…

published February 18, 2010

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01867 · 79.1th percentile
Published
2010-02-18T17:19Z
EPSS history
Timeline
  • 18 FEB 17:19Z
    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit…
    cvelistv5