CVE-2010-1215

Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope."

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.mozilla.org/security/announce/2010/mfsa2010-38.html	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=567069
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11527

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox:3.6.1:::::::*
	cpe:2.3:a:mozilla:firefox:3.6.2:::::::*
	cpe:2.3:a:mozilla:firefox:3.6.3:::::::*
	cpe:2.3:a:mozilla:firefox:3.6.4:::::::*
	cpe:2.3:a:mozilla:firefox:3.6.6:::::::*

Configuration 2 (hide)

cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-07-30 20:30

Updated : 2023-12-10 11:03

NVD link : CVE-2010-1215

Mitre link : CVE-2010-1215

CVE.ORG link : CVE-2010-1215

JSON object : View

Products Affected

mozilla

thunderbird
firefox

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2010-1215", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-07-30T20:30:01.643", "references": [{"url": "http://www.mozilla.org/security/announce/2010/mfsa2010-38.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=567069", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11527", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging \"access to an object from the chrome scope.\""}, {"lang": "es", "value": "Mozilla Firefox v3.6.x anteriores a la v3.6.7 y Thunderbird v3.1.x anteriores a la v3.1.1 no implementan apropiadamente el acceso a un objeto de contenido a trav\u00e9s de un \"wrapper\" (encapsulador) SafeJSObjectWrapper (SJOW), lo que permite a atacantes remotos ejecutar c\u00f3digo JavaScript de su elecci\u00f3n con privilegios chrome usando \"acceso a un objeto desde el scope (alcance) chrome\"."}], "lastModified": "2017-09-19T01:30:37.347", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39A968C1-8F61-4A26-A098-84F9A4DD5D3B"}, {"criteria": "cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30D47263-03AD-4060-91E3-90F997B3D174"}, {"criteria": "cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFD775DF-277E-4D5B-B980-B8E6E782467D"}, {"criteria": "cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8587BFD-417D-42BE-A5F8-22FDC68FA9E6"}, {"criteria": "cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7364FAB-EEE9-4064-A8AD-6547239F9AB3"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58FC2EFB-CE85-4A65-A7B4-A0779F11B5BA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}