Lucene search
SecurityvulnsSECURITYVULNS:DOC:24320HistoryJul 24, 2010 - 12:00 a.m.
Mozilla Foundation Security Advisory 2010-47
2010-07-2400:00:00
vulners.com
41
Mozilla Foundation Security Advisory 2010-47
Title: Cross-origin data leakage from script filename in error messages
Impact: Moderate
Announced: July 20, 2010
Reporter: Soroush Dalili
Products: Firefox, Thunderbird, SeaMonkey
Fixed in: Firefox 3.6.7
Firefox 3.5.11
Thunderbird 3.1.1
Thunderbird 3.0.6
SeaMonkey 2.0.6
Description
Security researcher Soroush Dalili reported that potentially sensitive URL parameters could be leaked across domains upon script errors when the script filename and line number is included in the error message.
References
* https://bugzilla.mozilla.org/show_bug.cgi?id=568564
* CVE-2010-2754
Related
prion
prion
Design/Logic Flaw
2010-07-30 13:26:00
cve
cve
CVE-2010-2754
2010-07-30 13:26:00
veracode
veracode
Information Disclosure
2020-04-10 00:45:43
ubuntucve
ubuntucve
CVE-2010-2754
2010-07-23 00:00:00
seebug
seebug
Mozilla FirefoxεΊιζΆζ―θζ¬ζδ»ΆεδΏ‘ζ―ζ³ι²ζΌζ΄
2010-07-27 00:00:00
mozilla
mozilla
Cross-origin data leakage from script filename in error messages β Mozilla
2010-07-20 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2010-07-21 00:00:00
thunderbird security update
2010-07-21 00:00:00
firefox security update
2010-07-21 00:00:00
openvas
openvas
CentOS Update for seamonkey CESA-2010:0546 centos3 i386
2010-08-20 00:00:00
RedHat Update for seamonkey RHSA-2010:0546-01
2010-07-23 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
nessus
nessus
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:169)
2010-09-03 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
2010-07-28 00:00:00
redhat
redhat
(RHSA-2010:0546) Critical: seamonkey security update
2010-07-20 00:00:00
(RHSA-2010:0544) Moderate: thunderbird security update
2010-07-20 00:00:00
(RHSA-2010:0545) Critical: thunderbird security update
2010-07-20 00:00:00
centos
centos
seamonkey security update
2010-08-16 21:36:58
thunderbird security update
2010-08-06 23:32:55
thunderbird security update
2010-07-22 14:50:56
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:37
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-8.fc12
2010-07-23 02:47:25
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
Related for SECURITYVULNS:DOC:24320