CVE-2010-0171: XSS
Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0171?
CVE-2010-0171 has a moderate severity rating as it allows remote attackers to capture keystrokes and potentially perform cross-site scripting attacks.
How do I fix CVE-2010-0171?
To fix CVE-2010-0171, update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version available.
Which versions are affected by CVE-2010-0171?
CVE-2010-0171 affects Mozilla Firefox versions prior to 3.6.2, Thunderbird versions prior to 3.0.2, and SeaMonkey versions prior to 2.0.3.
What types of attacks can CVE-2010-0171 facilitate?
CVE-2010-0171 can facilitate cross-origin keystroke capture and cross-site scripting (XSS) attacks.
Is CVE-2010-0171 specific to certain operating systems?
CVE-2010-0171 is not specific to any operating system, as it targets vulnerabilities within the application software itself.