CVE-2010-1215

Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka…

published July 30, 2010

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01489 · 73.9th percentile
Published
2010-07-30T20:00Z
EPSS history
Timeline
  • 30 JUL 20:00Z
    Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka…
    cvelistv5