CVE-2010-0162: XSS
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0162?
CVE-2010-0162 has a medium severity rating due to its potential to allow remote code execution through vulnerable web applications.
How do I fix CVE-2010-0162?
To fix CVE-2010-0162, users should upgrade affected versions of Mozilla Firefox and SeaMonkey to the latest available versions.
What versions are affected by CVE-2010-0162?
CVE-2010-0162 affects Mozilla Firefox versions 3.0.x before 3.0.18 and 3.5.x before 3.5.8, as well as SeaMonkey versions before 2.0.3.
What types of attacks can CVE-2010-0162 enable?
CVE-2010-0162 can enable remote attackers to execute arbitrary web scripts in the context of a vulnerable user's session.
When was CVE-2010-0162 announced?
CVE-2010-0162 was publicly announced in early 2010 as part of a security advisory by Mozilla.