PT-2010-4265 · Mozilla+1 · Firefox+2

Jordi Chancel

·

Published

2010-07-21

·

Updated

2024-06-15

·

CVE-2010-2751

CVSS v2.0

2.6

Low

VectorAV:N/AC:H/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.5.x through 3.5.10 Mozilla Firefox versions 3.6.x through 3.6.6 SeaMonkey versions prior to 2.0.6
Description The issue allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions. This is due to a problem in the nsDocShell::OnRedirectStateChange function.
Recommendations For Mozilla Firefox versions 3.5.x through 3.5.10, update to version 3.5.11 or later. For Mozilla Firefox versions 3.6.x through 3.6.6, update to version 3.6.7 or later. For SeaMonkey versions prior to 2.0.6, update to version 2.0.6 or later.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2751
DSA-2075-1
OPENSUSE-SU-2024:10071-1
RHSA-2010:0546
RHSA-2010:0547
RHSA-2010_0546
RHSA-2010_0547

Affected Products

Firefox
Red Hat
Seamonkey