CVE-2010-2763: XSS
First published: Thu Sep 09 2010(Updated: )
The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla SeaMonkey | <=2.0.6 | |
| Mozilla SeaMonkey | =1.0 | |
| Mozilla SeaMonkey | =1.0-alpha | |
| Mozilla SeaMonkey | =1.0-beta | |
| Mozilla SeaMonkey | =1.0.1 | |
| Mozilla SeaMonkey | =1.0.2 | |
| Mozilla SeaMonkey | =1.0.3 | |
| Mozilla SeaMonkey | =1.0.4 | |
| Mozilla SeaMonkey | =1.0.5 | |
| Mozilla SeaMonkey | =1.0.6 | |
| Mozilla SeaMonkey | =1.0.7 | |
| Mozilla SeaMonkey | =1.0.8 | |
| Mozilla SeaMonkey | =1.0.9 | |
| Mozilla SeaMonkey | =1.1 | |
| Mozilla SeaMonkey | =1.1-alpha | |
| Mozilla SeaMonkey | =1.1-beta | |
| Mozilla SeaMonkey | =1.1.1 | |
| Mozilla SeaMonkey | =1.1.2 | |
| Mozilla SeaMonkey | =1.1.3 | |
| Mozilla SeaMonkey | =1.1.4 | |
| Mozilla SeaMonkey | =1.1.5 | |
| Mozilla SeaMonkey | =1.1.6 | |
| Mozilla SeaMonkey | =1.1.7 | |
| Mozilla SeaMonkey | =1.1.8 | |
| Mozilla SeaMonkey | =1.1.9 | |
| Mozilla SeaMonkey | =1.1.10 | |
| Mozilla SeaMonkey | =1.1.11 | |
| Mozilla SeaMonkey | =1.1.12 | |
| Mozilla SeaMonkey | =1.1.13 | |
| Mozilla SeaMonkey | =1.1.14 | |
| Mozilla SeaMonkey | =1.1.15 | |
| Mozilla SeaMonkey | =1.1.16 | |
| Mozilla SeaMonkey | =1.1.17 | |
| Mozilla SeaMonkey | =1.1.18 | |
| Mozilla SeaMonkey | =1.1.19 | |
| Mozilla SeaMonkey | =1.5.0.8 | |
| Mozilla SeaMonkey | =1.5.0.9 | |
| Mozilla SeaMonkey | =1.5.0.10 | |
| Mozilla SeaMonkey | =2.0 | |
| Mozilla SeaMonkey | =2.0-alpha_1 | |
| Mozilla SeaMonkey | =2.0-alpha_2 | |
| Mozilla SeaMonkey | =2.0-alpha_3 | |
| Mozilla SeaMonkey | =2.0-beta_1 | |
| Mozilla SeaMonkey | =2.0-beta_2 | |
| Mozilla SeaMonkey | =2.0-rc1 | |
| Mozilla SeaMonkey | =2.0-rc2 | |
| Mozilla SeaMonkey | =2.0.1 | |
| Mozilla SeaMonkey | =2.0.2 | |
| Mozilla SeaMonkey | =2.0.3 | |
| Mozilla SeaMonkey | =2.0.4 | |
| Mozilla SeaMonkey | =2.0.5 | |
| Mozilla SeaMonkey | =2.0a1pre | |
| Mozilla Thunderbird | <=3.0.6 | |
| Mozilla Thunderbird | =0.1 | |
| Mozilla Thunderbird | =0.2 | |
| Mozilla Thunderbird | =0.3 | |
| Mozilla Thunderbird | =0.4 | |
| Mozilla Thunderbird | =0.5 | |
| Mozilla Thunderbird | =0.6 | |
| Mozilla Thunderbird | =0.7 | |
| Mozilla Thunderbird | =0.7.1 | |
| Mozilla Thunderbird | =0.7.2 | |
| Mozilla Thunderbird | =0.7.3 | |
| Mozilla Thunderbird | =0.8 | |
| Mozilla Thunderbird | =0.9 | |
| Mozilla Thunderbird | =1.0 | |
| Mozilla Thunderbird | =1.0.1 | |
| Mozilla Thunderbird | =1.0.2 | |
| Mozilla Thunderbird | =1.0.3 | |
| Mozilla Thunderbird | =1.0.4 | |
| Mozilla Thunderbird | =1.0.5 | |
| Mozilla Thunderbird | =1.0.6 | |
| Mozilla Thunderbird | =1.0.7 | |
| Mozilla Thunderbird | =1.0.8 | |
| Mozilla Thunderbird | =1.5 | |
| Mozilla Thunderbird | =1.5-beta2 | |
| Mozilla Thunderbird | =1.5.0.1 | |
| Mozilla Thunderbird | =1.5.0.2 | |
| Mozilla Thunderbird | =1.5.0.3 | |
| Mozilla Thunderbird | =1.5.0.4 | |
| Mozilla Thunderbird | =1.5.0.5 | |
| Mozilla Thunderbird | =1.5.0.6 | |
| Mozilla Thunderbird | =1.5.0.7 | |
| Mozilla Thunderbird | =1.5.0.8 | |
| Mozilla Thunderbird | =1.5.0.9 | |
| Mozilla Thunderbird | =1.5.0.10 | |
| Mozilla Thunderbird | =1.5.0.11 | |
| Mozilla Thunderbird | =1.5.0.12 | |
| Mozilla Thunderbird | =1.5.0.13 | |
| Mozilla Thunderbird | =1.5.0.14 | |
| Mozilla Thunderbird | =1.5.1 | |
| Mozilla Thunderbird | =1.5.2 | |
| Mozilla Thunderbird | =2.0 | |
| Mozilla Thunderbird | =2.0.0.0 | |
| Mozilla Thunderbird | =2.0.0.1 | |
| Mozilla Thunderbird | =2.0.0.2 | |
| Mozilla Thunderbird | =2.0.0.3 | |
| Mozilla Thunderbird | =2.0.0.4 | |
| Mozilla Thunderbird | =2.0.0.5 | |
| Mozilla Thunderbird | =2.0.0.6 | |
| Mozilla Thunderbird | =2.0.0.7 | |
| Mozilla Thunderbird | =2.0.0.8 | |
| Mozilla Thunderbird | =2.0.0.9 | |
| Mozilla Thunderbird | =2.0.0.12 | |
| Mozilla Thunderbird | =2.0.0.14 | |
| Mozilla Thunderbird | =2.0.0.16 | |
| Mozilla Thunderbird | =2.0.0.17 | |
| Mozilla Thunderbird | =2.0.0.18 | |
| Mozilla Thunderbird | =2.0.0.19 | |
| Mozilla Thunderbird | =2.0.0.21 | |
| Mozilla Thunderbird | =2.0.0.22 | |
| Mozilla Thunderbird | =2.0.0.23 | |
| Mozilla Thunderbird | =3.0 | |
| Mozilla Thunderbird | =3.0.1 | |
| Mozilla Thunderbird | =3.0.2 | |
| Mozilla Thunderbird | =3.0.3 | |
| Mozilla Thunderbird | =3.0.4 | |
| Mozilla Thunderbird | =3.0.5 | |
| Mozilla Firefox | <=3.5.11 | |
| Mozilla Firefox | =1.0 | |
| Mozilla Firefox | =1.0-preview_release | |
| Mozilla Firefox | =1.0.1 | |
| Mozilla Firefox | =1.0.2 | |
| Mozilla Firefox | =1.0.3 | |
| Mozilla Firefox | =1.0.4 | |
| Mozilla Firefox | =1.0.5 | |
| Mozilla Firefox | =1.0.6 | |
| Mozilla Firefox | =1.0.7 | |
| Mozilla Firefox | =1.0.8 | |
| Mozilla Firefox | =1.5 | |
| Mozilla Firefox | =1.5-beta1 | |
| Mozilla Firefox | =1.5-beta2 | |
| Mozilla Firefox | =1.5.0.1 | |
| Mozilla Firefox | =1.5.0.2 | |
| Mozilla Firefox | =1.5.0.3 | |
| Mozilla Firefox | =1.5.0.4 | |
| Mozilla Firefox | =1.5.0.5 | |
| Mozilla Firefox | =1.5.0.6 | |
| Mozilla Firefox | =1.5.0.7 | |
| Mozilla Firefox | =1.5.0.8 | |
| Mozilla Firefox | =1.5.0.9 | |
| Mozilla Firefox | =1.5.0.10 | |
| Mozilla Firefox | =1.5.0.11 | |
| Mozilla Firefox | =1.5.0.12 | |
| Mozilla Firefox | =1.5.1 | |
| Mozilla Firefox | =1.5.2 | |
| Mozilla Firefox | =1.5.3 | |
| Mozilla Firefox | =1.5.4 | |
| Mozilla Firefox | =1.5.5 | |
| Mozilla Firefox | =1.5.6 | |
| Mozilla Firefox | =1.5.7 | |
| Mozilla Firefox | =1.5.8 | |
| Mozilla Firefox | =2.0 | |
| Mozilla Firefox | =2.0.0.1 | |
| Mozilla Firefox | =2.0.0.2 | |
| Mozilla Firefox | =2.0.0.3 | |
| Mozilla Firefox | =2.0.0.4 | |
| Mozilla Firefox | =2.0.0.5 | |
| Mozilla Firefox | =2.0.0.6 | |
| Mozilla Firefox | =2.0.0.7 | |
| Mozilla Firefox | =2.0.0.8 | |
| Mozilla Firefox | =2.0.0.9 | |
| Mozilla Firefox | =2.0.0.10 | |
| Mozilla Firefox | =2.0.0.11 | |
| Mozilla Firefox | =2.0.0.12 | |
| Mozilla Firefox | =2.0.0.13 | |
| Mozilla Firefox | =2.0.0.14 | |
| Mozilla Firefox | =2.0.0.15 | |
| Mozilla Firefox | =2.0.0.16 | |
| Mozilla Firefox | =2.0.0.17 | |
| Mozilla Firefox | =2.0.0.18 | |
| Mozilla Firefox | =2.0.0.19 | |
| Mozilla Firefox | =2.0.0.20 | |
| Mozilla Firefox | =3.0 | |
| Mozilla Firefox | =3.0.1 | |
| Mozilla Firefox | =3.0.2 | |
| Mozilla Firefox | =3.0.3 | |
| Mozilla Firefox | =3.0.4 | |
| Mozilla Firefox | =3.0.5 | |
| Mozilla Firefox | =3.0.6 | |
| Mozilla Firefox | =3.0.7 | |
| Mozilla Firefox | =3.0.8 | |
| Mozilla Firefox | =3.0.9 | |
| Mozilla Firefox | =3.0.10 | |
| Mozilla Firefox | =3.0.11 | |
| Mozilla Firefox | =3.0.12 | |
| Mozilla Firefox | =3.0.13 | |
| Mozilla Firefox | =3.0.14 | |
| Mozilla Firefox | =3.0.15 | |
| Mozilla Firefox | =3.0.16 | |
| Mozilla Firefox | =3.0.17 | |
| Mozilla Firefox | =3.5 | |
| Mozilla Firefox | =3.5.1 | |
| Mozilla Firefox | =3.5.2 | |
| Mozilla Firefox | =3.5.3 | |
| Mozilla Firefox | =3.5.4 | |
| Mozilla Firefox | =3.5.5 | |
| Mozilla Firefox | =3.5.6 | |
| Mozilla Firefox | =3.5.7 | |
| Mozilla Firefox | =3.5.8 | |
| Mozilla Firefox | =3.5.9 | |
| Mozilla Firefox | =3.5.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html
- http://www.debian.org/security/2010/dsa-2106
- http://www.mozilla.org/security/announce/2010/mfsa2010-60.html
- http://www.vupen.com/english/advisories/2010/2323
- https://bugzilla.mozilla.org/show_bug.cgi?id=585284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61665
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12114
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/mozilla
- canonical/mozilla seamonkey
- version/mozilla seamonkey/1.1.10
- version/mozilla seamonkey/1.0.3
- version/mozilla seamonkey/1.1.8
- version/mozilla seamonkey/1.0.1
- version/mozilla seamonkey/1.1.7
- version/mozilla seamonkey/1.5.0.10
- version/mozilla seamonkey/1.0.6
- version/mozilla seamonkey/1.0.9
- version/mozilla seamonkey/1.1.3
- version/mozilla seamonkey/2.0a1pre
- version/mozilla seamonkey/2.0.4
- version/mozilla seamonkey/1.0
- version/mozilla seamonkey/2.0.3
- version/mozilla seamonkey/2.0.2
- version/mozilla seamonkey/1.1.17
- version/mozilla seamonkey/2.0-alpha_2
- version/mozilla seamonkey/1.1.5
- version/mozilla seamonkey/1.0.7
- version/mozilla seamonkey/1.0-beta
- version/mozilla seamonkey/1.1-alpha
- version/mozilla seamonkey/2.0-rc2
- version/mozilla seamonkey/2.0-alpha_3
- version/mozilla seamonkey/1.0-alpha
- version/mozilla seamonkey/1.1.12
- version/mozilla seamonkey/1.1
- version/mozilla seamonkey/1.1.14
- version/mozilla seamonkey/1.1.2
- version/mozilla seamonkey/2.0-beta_2
- version/mozilla seamonkey/1.0.2
- version/mozilla seamonkey/1.0.8
- version/mozilla seamonkey/2.0.6
- version/mozilla seamonkey/1.1.11
- version/mozilla seamonkey/2.0-alpha_1
- version/mozilla seamonkey/1.5.0.9
- version/mozilla seamonkey/1.1-beta
- version/mozilla seamonkey/1.1.1
- version/mozilla seamonkey/1.5.0.8
- version/mozilla seamonkey/2.0.1
- version/mozilla seamonkey/1.0.5
- version/mozilla seamonkey/1.1.15
- version/mozilla seamonkey/1.1.6
- version/mozilla seamonkey/1.1.16
- version/mozilla seamonkey/2.0-beta_1
- version/mozilla seamonkey/1.1.19
- version/mozilla seamonkey/2.0.5
- version/mozilla seamonkey/2.0-rc1
- version/mozilla seamonkey/1.0.4
- version/mozilla seamonkey/1.1.9
- version/mozilla seamonkey/1.1.13
- version/mozilla seamonkey/1.1.18
- version/mozilla seamonkey/2.0
- version/mozilla seamonkey/1.1.4
- canonical/mozilla thunderbird
- version/mozilla thunderbird/3.0.5
- version/mozilla thunderbird/1.5.0.7
- version/mozilla thunderbird/0.6
- version/mozilla thunderbird/0.7.2
- version/mozilla thunderbird/2.0.0.4
- version/mozilla thunderbird/2.0.0.6
- version/mozilla thunderbird/0.3
- version/mozilla thunderbird/2.0.0.21
- version/mozilla thunderbird/3.0.1
- version/mozilla thunderbird/0.2
- version/mozilla thunderbird/1.0.7
- version/mozilla thunderbird/2.0.0.18
- version/mozilla thunderbird/2.0.0.9
- version/mozilla thunderbird/2.0.0.16
- version/mozilla thunderbird/2.0.0.8
- version/mozilla thunderbird/2.0.0.7
- version/mozilla thunderbird/1.5.0.3
- version/mozilla thunderbird/1.5.0.10
- version/mozilla thunderbird/1.5.0.5
- version/mozilla thunderbird/1.5.0.6
- version/mozilla thunderbird/1.0
- version/mozilla thunderbird/2.0.0.3
- version/mozilla thunderbird/3.0.6
- version/mozilla thunderbird/1.0.1
- version/mozilla thunderbird/1.5-beta2
- version/mozilla thunderbird/2.0.0.2
- version/mozilla thunderbird/3.0.3
- version/mozilla thunderbird/1.0.2
- version/mozilla thunderbird/2.0.0.0
- version/mozilla thunderbird/1.5.0.13
- version/mozilla thunderbird/2.0.0.12
- version/mozilla thunderbird/2.0.0.22
- version/mozilla thunderbird/1.5
- version/mozilla thunderbird/1.5.0.2
- version/mozilla thunderbird/1.5.0.8
- version/mozilla thunderbird/2.0.0.14
- version/mozilla thunderbird/3.0.4
- version/mozilla thunderbird/0.5
- version/mozilla thunderbird/1.0.4
- version/mozilla thunderbird/1.5.2
- version/mozilla thunderbird/2.0.0.17
- version/mozilla thunderbird/2.0.0.23
- version/mozilla thunderbird/1.5.0.9
- version/mozilla thunderbird/1.5.0.11
- version/mozilla thunderbird/0.9
- version/mozilla thunderbird/1.0.3
- version/mozilla thunderbird/2.0
- version/mozilla thunderbird/3.0
- version/mozilla thunderbird/1.5.0.12
- version/mozilla thunderbird/0.7.3
- version/mozilla thunderbird/0.4
- version/mozilla thunderbird/1.5.1
- version/mozilla thunderbird/0.7
- version/mozilla thunderbird/1.5.0.14
- version/mozilla thunderbird/1.0.6
- version/mozilla thunderbird/2.0.0.5
- version/mozilla thunderbird/2.0.0.1
- version/mozilla thunderbird/1.5.0.1
- version/mozilla thunderbird/1.0.8
- version/mozilla thunderbird/0.1
- version/mozilla thunderbird/0.7.1
- version/mozilla thunderbird/1.0.5
- version/mozilla thunderbird/0.8
- version/mozilla thunderbird/3.0.2
- version/mozilla thunderbird/2.0.0.19
- version/mozilla thunderbird/1.5.0.4
- canonical/mozilla firefox
- version/mozilla firefox/2.0.0.12
- version/mozilla firefox/1.5-beta2
- version/mozilla firefox/3.0.17
- version/mozilla firefox/3.5.3
- version/mozilla firefox/3.0.7
- version/mozilla firefox/1.5.2
- version/mozilla firefox/3.0.9
- version/mozilla firefox/1.5.0.6
- version/mozilla firefox/2.0.0.2
- version/mozilla firefox/1.5.0.10
- version/mozilla firefox/1.5.0.3
- version/mozilla firefox/3.5.6
- version/mozilla firefox/3.0.8
- version/mozilla firefox/1.5.0.11
- version/mozilla firefox/1.5.4
- version/mozilla firefox/1.0.2
- version/mozilla firefox/3.5
- version/mozilla firefox/3.5.5
- version/mozilla firefox/3.0.4
- version/mozilla firefox/1.5-beta1
- version/mozilla firefox/3.5.9
- version/mozilla firefox/3.5.4
- version/mozilla firefox/3.5.7
- version/mozilla firefox/3.0.5
- version/mozilla firefox/1.5
- version/mozilla firefox/1.0.4
- version/mozilla firefox/2.0.0.7
- version/mozilla firefox/1.0.7
- version/mozilla firefox/3.5.10
- version/mozilla firefox/3.5.1
- version/mozilla firefox/2.0.0.9
- version/mozilla firefox/3.0.14
- version/mozilla firefox/3.5.2
- version/mozilla firefox/2.0.0.16
- version/mozilla firefox/1.5.6
- version/mozilla firefox/2.0.0.17
- version/mozilla firefox/2.0.0.15
- version/mozilla firefox/3.0.10
- version/mozilla firefox/3.0.12
- version/mozilla firefox/1.0
- version/mozilla firefox/3.0.3
- version/mozilla firefox/1.5.0.7
- version/mozilla firefox/2.0
- version/mozilla firefox/1.0.1
- version/mozilla firefox/2.0.0.14
- version/mozilla firefox/3.0.6
- version/mozilla firefox/3.0.15
- version/mozilla firefox/1.5.0.8
- version/mozilla firefox/2.0.0.3
- version/mozilla firefox/1.5.0.9
- version/mozilla firefox/1.5.0.5
- version/mozilla firefox/1.5.7
- version/mozilla firefox/1.5.0.12
- version/mozilla firefox/2.0.0.6
- version/mozilla firefox/3.5.11
- version/mozilla firefox/3.0
- version/mozilla firefox/2.0.0.11
- version/mozilla firefox/1.5.0.2
- version/mozilla firefox/1.0.3
- version/mozilla firefox/3.0.1
- version/mozilla firefox/2.0.0.4
- version/mozilla firefox/1.5.1
- version/mozilla firefox/2.0.0.13
- version/mozilla firefox/2.0.0.18
- version/mozilla firefox/2.0.0.1
- version/mozilla firefox/3.0.2
- version/mozilla firefox/3.5.8
- version/mozilla firefox/1.5.5
- version/mozilla firefox/1.0-preview_release
- version/mozilla firefox/2.0.0.20
- version/mozilla firefox/2.0.0.8
- version/mozilla firefox/2.0.0.19
- version/mozilla firefox/1.5.8
- version/mozilla firefox/1.5.3
- version/mozilla firefox/1.5.0.4
- version/mozilla firefox/1.5.0.1
- version/mozilla firefox/3.0.13
- version/mozilla firefox/1.0.5
- version/mozilla firefox/2.0.0.5
- version/mozilla firefox/2.0.0.10
- version/mozilla firefox/1.0.6
- version/mozilla firefox/3.0.16
- version/mozilla firefox/1.0.8
- version/mozilla firefox/3.0.11