CVEvulnerability
CVE-2002-2437
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
Affected configurations
• mozilla firefox (<= 3.6.24)
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
• mozilla firefox 3.0.6
• mozilla firefox 3.0.7
• mozilla firefox 3.0.8
• mozilla firefox 3.0.9
• mozilla firefox 3.0.10
• mozilla firefox 3.0.11
• mozilla firefox 3.0.12
• mozilla firefox 3.0.13
• mozilla firefox 3.0.14
• mozilla firefox 3.0.15
• mozilla firefox 3.0.16
• mozilla firefox 3.0.17
• mozilla firefox 3.5
• mozilla firefox 3.5.1
• mozilla firefox 3.5.2
• mozilla firefox 3.5.3
• mozilla firefox 3.5.4
• mozilla firefox 3.5.5
• mozilla firefox 3.5.6
• mozilla firefox 3.5.7
• mozilla firefox 3.5.8
• mozilla firefox 3.5.9
• mozilla firefox 3.5.10
• mozilla firefox 3.5.11
• mozilla firefox 3.5.12
• mozilla firefox 3.5.13
• mozilla firefox 3.5.14
• mozilla firefox 3.5.15
• mozilla firefox 3.6
• mozilla firefox 3.6.1
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla firefox 3.6.14
• mozilla firefox 3.6.15
• mozilla firefox 3.6.16
• mozilla firefox 3.6.17
• mozilla firefox 3.6.18
• mozilla firefox 3.6.19
• mozilla firefox 3.6.20
• mozilla firefox 3.6.21
• mozilla firefox 3.6.22
• mozilla firefox 3.6.23
• mozilla thunderbird (<= 3.1.16)
• mozilla thunderbird 3.0
… and 78 more
Related
Weakness · not in database (1)
References
- http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ blog.mozilla.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=147777 bugzilla.mozilla.org
- http://w2spconf.com/2010/papers/p26.pdf Exploit
- https://developer.mozilla.org/en/CSS/Privacy_and_the_:visited_selector developer.mozilla.org
- http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ blog.mozilla.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=147777 bugzilla.mozilla.org
- http://w2spconf.com/2010/papers/p26.pdf Exploit
- https://developer.mozilla.org/en/CSS/Privacy_and_the_:visited_selector developer.mozilla.org