CVE-2010-1207

Mozilla Firefox <3.6.7 & Thunderbird <3.1.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.

References (3)

Core 3
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=571287
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11887

Scores

EPSS 0.0136
EPSS Percentile 68.7%

Details

CWE
CWE-264
Status published
Products (6)
mozilla/firefox 3.6
mozilla/firefox 3.6.2
mozilla/firefox 3.6.3
mozilla/firefox 3.6.4
mozilla/firefox < 3.6.6
mozilla/thunderbird < 3.1
Published Jul 30, 2010
Tracked Since Feb 18, 2026