ZeroDay Findings
Sign inSign up

Findings

CVE-2010-0179

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly ha…

Published Apr 5, 2010 · updated Aug 7, 2024 · n/a n/a

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 7, 2024 · CVE.org

    Updated

    Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.

  2. Oct 15, 2026 · Mozilla Security Advisories

    Detected

    Named on the public Mozilla Security Advisories page.

Affected

  • vendor n/a n/aversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2010-0179

    Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attacker

    cve.org
  • Mozilla Security AdvisoriesVendor advisoryCVE-2010-0179

    Named on the public Mozilla Security Advisories page.

    mozilla.org

References