CVE-2010-3774

The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11…

published December 10, 2010

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle (1) about:neterror and (2) about:certerror pages, which allows remote attackers to spoof the location bar via a crafted web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01635 · 76.0th percentile
Published
2010-12-10T18:00Z
EPSS history
Timeline
  • 10 DEC 18:00Z
    The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11…
    cvelistv5