CVEvulnerability
CVE-2010-3177
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla seamonkey (<= 2.0.8)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla firefox (<= 3.5.13)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
… and 74 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html lists.fedoraproject.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100114250 support.avaya.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2124 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-68.html www.mozilla.org
- http://www.redhat.com/support/errata/RHSA-2010-0781.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0861.html www.redhat.com
- http://www.ubuntu.com/usn/USN-997-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=556734 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12202 oval.cisecurity.org
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html lists.fedoraproject.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100114250 support.avaya.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2124 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-68.html www.mozilla.org
- http://www.redhat.com/support/errata/RHSA-2010-0781.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0861.html www.redhat.com
- http://www.ubuntu.com/usn/USN-997-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=556734 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12202 oval.cisecurity.org