CVEvulnerability

CVE-2010-5074

4.3 MEDIUM Published 2011-12-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-12-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-362

Description

The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences, which makes it easier for remote attackers to obtain sensitive information about visited web pages via a timing attack.

Affected configurations

• mozilla firefox (<= 3.6.24) • mozilla firefox 3.0 • mozilla firefox 3.0.1 • mozilla firefox 3.0.2 • mozilla firefox 3.0.3 • mozilla firefox 3.0.4 • mozilla firefox 3.0.5 • mozilla firefox 3.0.6 • mozilla firefox 3.0.7 • mozilla firefox 3.0.8 • mozilla firefox 3.0.9 • mozilla firefox 3.0.10 • mozilla firefox 3.0.11 • mozilla firefox 3.0.12 • mozilla firefox 3.0.13 • mozilla firefox 3.0.14 • mozilla firefox 3.0.15 • mozilla firefox 3.0.16 • mozilla firefox 3.0.17 • mozilla firefox 3.5 • mozilla firefox 3.5.1 • mozilla firefox 3.5.2 • mozilla firefox 3.5.3 • mozilla firefox 3.5.4 • mozilla firefox 3.5.5 • mozilla firefox 3.5.6 • mozilla firefox 3.5.7 • mozilla firefox 3.5.8 • mozilla firefox 3.5.9 • mozilla firefox 3.5.10 • mozilla firefox 3.5.11 • mozilla firefox 3.5.12 • mozilla firefox 3.5.13 • mozilla firefox 3.5.14 • mozilla firefox 3.5.15 • mozilla firefox 3.6 • mozilla firefox 3.6.1 • mozilla firefox 3.6.2 • mozilla firefox 3.6.3 • mozilla firefox 3.6.4 • mozilla firefox 3.6.6 • mozilla firefox 3.6.7 • mozilla firefox 3.6.8 • mozilla firefox 3.6.9 • mozilla firefox 3.6.10 • mozilla firefox 3.6.11 • mozilla firefox 3.6.12 • mozilla firefox 3.6.13 • mozilla firefox 3.6.14 • mozilla firefox 3.6.15 • mozilla firefox 3.6.16 • mozilla firefox 3.6.17 • mozilla firefox 3.6.18 • mozilla firefox 3.6.19 • mozilla firefox 3.6.20 • mozilla firefox 3.6.21 • mozilla firefox 3.6.22 • mozilla firefox 3.6.23 • mozilla thunderbird (<= 3.1.16) • mozilla thunderbird 3.0 … and 78 more

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References