Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2010-3770

Опубликовано: 10 дек. 2010
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.

РелизСтатусПримечание
dapper

ignored

end of life
devel

released

4.0~b8+nobinonly-0ubuntu3
hardy

ignored

end of life
karmic

DNE

lucid

released

3.6.13+build3+nobinonly-0ubuntu0.10.04.1
maverick

released

3.6.13+build3+nobinonly-0ubuntu0.10.10.1
upstream

released

3.6.13

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

released

3.6.13+build3+nobinonly-0ubuntu0.8.04.1
karmic

DNE

lucid

DNE

maverick

DNE

upstream

needs-triage

Ubuntu source uses 3.6.x

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

DNE

karmic

released

3.6.13+build3+nobinonly-0ubuntu0.9.10.1
lucid

DNE

maverick

DNE

upstream

needs-triage

Ubuntu source uses 3.6.x

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

released

2.0.11+build1+nobinonly-0ubuntu1
hardy

released

2.0.11+build1+nobinonly-0ubuntu0.8.04.1
karmic

released

2.0.11+build1+nobinonly-0ubuntu0.9.10.1
lucid

released

2.0.11+build1+nobinonly-0ubuntu0.10.04.1
maverick

released

2.0.11+build1+nobinonly-0ubuntu0.10.10.1
upstream

released

2.0.11

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

released

1.9.2.13+build3+nobinonly-0ubuntu1
hardy

released

1.9.2.13+build3+nobinonly-0ubuntu0.8.04.1
karmic

released

1.9.2.13+build3+nobinonly-0ubuntu0.9.10.1
lucid

released

1.9.2.13+build3+nobinonly-0ubuntu0.10.04.1
maverick

released

1.9.2.13+build3+nobinonly-0ubuntu0.10.10.1
upstream

needs-triage

Показывать по

EPSS

Процентиль: 93%
0.0993
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

redhat
больше 14 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.

nvd
больше 14 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.

debian
больше 14 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the rendering e ...

github
около 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.

oracle-oval
больше 14 лет назад

ELSA-2010-0966: firefox security update (CRITICAL)

EPSS

Процентиль: 93%
0.0993
Низкий

4.3 Medium

CVSS2