Security Advisory

CVE-2010-2754

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-07-29 18:00:00

Last updated 2024-08-07 02:46:47

Assigner mitre

State PUBLISHED

Description

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a scripts URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.

← Browse all CVEs View on cve.org ↗