NetSight
IP …
medium5.0

CVE-2010-2754

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonke…

Impact

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5, 3.5.6
MozillaThunderbird
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5
MozillaSeamonkey
through 2.0.5
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-200

References