Vulnérabilité · NVD

CVE-2010-1585

N/A Publié le 2010-04-28

EN The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element.

EPSS 4.47% au-dessus de la médiane percentile 90.6%

Apps suivies liées à cette CVE

Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affecté — Corrigé — Dernière suivie 153.0.2 indéterminé

Configurations CPE vulnérables (81)

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤3.1.7	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:beta2::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::*

Voir sur NVD ↗