CVE-2010-3400: Medium severity Mozilla Firefox vulnerability
The jsInitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2008-5913.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3400?
CVE-2010-3400 has a medium severity rating, allowing attackers to potentially compromise the randomness of generated data.
How do I fix CVE-2010-3400?
To fix CVE-2010-3400, update your Mozilla Firefox to version 3.5.10 or 3.6.4 or later, or update SeaMonkey to version 2.0.5 or later.
Which versions are affected by CVE-2010-3400?
CVE-2010-3400 affects Mozilla Firefox versions before 3.5.10 and 3.6.4, as well as SeaMonkey versions before 2.0.5.
Can CVE-2010-3400 lead to further vulnerabilities?
Yes, if exploited, CVE-2010-3400 could allow attackers to predict random values used in cryptographic operations, leading to a chain of security vulnerabilities.
What kind of attacks can CVE-2010-3400 enable?
CVE-2010-3400 may enable brute-force attacks by allowing an attacker to guess the seed value of the random number generator.