PT-2010-2841 · Mozilla+1 · Firefox+2

Publicado 2010-03-26 · Atualizado 2024-12-12 · CVE-2010-1125

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.x through 3.5.9 Mozilla Firefox versions 3.6.x through 3.6.3 SeaMonkey versions prior to 2.0.5

Description The issue allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus() method.

Recommendations For Mozilla Firefox versions 3.x through 3.5.9, update to version 3.5.10 or later. For Mozilla Firefox versions 3.6.x through 3.6.3, update to version 3.6.4 or later. For SeaMonkey versions prior to 2.0.5, update to version 2.0.5 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-1125

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2010:0500

RHSA-2010:0501

RHSA-2010_0500

RHSA-2010_0501

Produtos afetados

Firefox

Red Hat

Seamonkey

Referências · 2096

• https://suse.com/security/cve/CVE-2023-6856 · Nota
• https://suse.com/security/cve/CVE-2024-4778 · Nota
• https://suse.com/security/cve/CVE-2019-11751 · Nota
• https://suse.com/security/cve/CVE-2017-5441 · Nota
• https://suse.com/security/cve/CVE-2023-6861 · Nota
• https://suse.com/security/cve/CVE-2015-0817 · Nota
• https://suse.com/security/cve/CVE-2021-23965 · Nota
• https://suse.com/security/cve/CVE-2016-9899 · Nota
• https://suse.com/security/cve/CVE-2014-1562 · Nota
• https://suse.com/security/cve/CVE-2015-7176 · Nota
• https://suse.com/security/cve/CVE-2023-32206 · Nota
• https://suse.com/security/cve/CVE-2017-5406 · Nota
• https://suse.com/security/cve/CVE-2016-5272 · Nota
• https://suse.com/security/cve/CVE-2012-3961 · Nota
• https://suse.com/security/cve/CVE-2017-7836 · Nota