NetSight
IP …
medium4.3

CVE-2010-0171

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to…

Impact

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.0, 3.0.1, 3.0.10, 3.0.11, 3.0.12, 3.0.13
MozillaSeamonkey
through 2.0.2
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4
MozillaThunderbird
through 3.0.1
Versions 1.5, 1.5.0.1, 1.5.0.2, 1.5.0.3, 1.5.0.4

Weakness classification

CWE-79

References