CVE-2010-3400
Mozilla Firefox <3.5.10 & SeaMonkey <2.0.5 - Info Disclosure
Title source: llmDescription
The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2008-5913.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7339
Patch x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=475585
Scores
EPSS
0.0141
EPSS Percentile
69.6%
Details
CWE
CWE-310
Status
published
Products (42)
mozilla/firefox
3.5
mozilla/firefox
3.5.1
mozilla/firefox
3.5.2
mozilla/firefox
3.5.3
mozilla/firefox
3.5.4
mozilla/firefox
3.5.5
mozilla/firefox
3.5.6
mozilla/firefox
3.5.7
mozilla/firefox
3.5.8
mozilla/firefox
3.5.9
... and 32 more
Published
Sep 15, 2010
Tracked Since
Feb 18, 2026