CVE-2010-3773

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not…

published December 10, 2010

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03083 · 87.6th percentile
Published
2010-12-10T18:00Z
EPSS history
Timeline
  • 10 DEC 18:00Z
    Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not…
    cvelistv5