CVE-2010-0182

EPSS 1.19%
Veröffentlicht 05.04.2010 17:30:00
Zuletzt bearbeitet 16.06.2026 23:15:39
Erkennungen
Login

The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 19

NVD 206 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version 3.6

Mozilla ≫ Firefox Version <= 3.5.7

Mozilla ≫ Firefox Version 0.1

Mozilla ≫ Firefox Version 0.2

Mozilla ≫ Firefox Version 0.3

Mozilla ≫ Firefox Version 0.4

Mozilla ≫ Firefox Version 0.5

Mozilla ≫ Firefox Version 0.6

Mozilla ≫ Firefox Version 0.6.1

Mozilla ≫ Firefox Version 0.7

Mozilla ≫ Firefox Version 0.7.1

Mozilla ≫ Firefox Version 0.8

Mozilla ≫ Firefox Version 0.9

Mozilla ≫ Firefox Version 0.9 Update rc

Mozilla ≫ Firefox Version 0.9.1

Mozilla ≫ Firefox Version 0.9.2

Mozilla ≫ Firefox Version 0.9.3

Mozilla ≫ Firefox Version 0.10

Mozilla ≫ Firefox Version 0.10.1

Mozilla ≫ Firefox Version 1.0

Mozilla ≫ Firefox Version 1.0 Update preview_release

Mozilla ≫ Firefox Version 1.0.1

Mozilla ≫ Firefox Version 1.0.2

Mozilla ≫ Firefox Version 1.0.3

Mozilla ≫ Firefox Version 1.0.4

Mozilla ≫ Firefox Version 1.0.5

Mozilla ≫ Firefox Version 1.0.6

Mozilla ≫ Firefox Version 1.0.7

Mozilla ≫ Firefox Version 1.0.8

Mozilla ≫ Firefox Version 1.5

Mozilla ≫ Firefox Version 1.5 Update beta1

Mozilla ≫ Firefox Version 1.5 Update beta2

Mozilla ≫ Firefox Version 1.5.0.1

Mozilla ≫ Firefox Version 1.5.0.2

Mozilla ≫ Firefox Version 1.5.0.3

Mozilla ≫ Firefox Version 1.5.0.4

Mozilla ≫ Firefox Version 1.5.0.5

Mozilla ≫ Firefox Version 1.5.0.6

Mozilla ≫ Firefox Version 1.5.0.7

Mozilla ≫ Firefox Version 1.5.0.8

Mozilla ≫ Firefox Version 1.5.0.9

Mozilla ≫ Firefox Version 1.5.0.10

Mozilla ≫ Firefox Version 1.5.0.11

Mozilla ≫ Firefox Version 1.5.0.12

Mozilla ≫ Firefox Version 1.5.1

Mozilla ≫ Firefox Version 1.5.2

Mozilla ≫ Firefox Version 1.5.3

Mozilla ≫ Firefox Version 1.5.4

Mozilla ≫ Firefox Version 1.5.5

Mozilla ≫ Firefox Version 1.5.6

Mozilla ≫ Firefox Version 1.5.7

Mozilla ≫ Firefox Version 1.5.8

Mozilla ≫ Firefox Version 2.0

Mozilla ≫ Firefox Version 2.0.0.1

Mozilla ≫ Firefox Version 2.0.0.2

Mozilla ≫ Firefox Version 2.0.0.3

Mozilla ≫ Firefox Version 2.0.0.4

Mozilla ≫ Firefox Version 2.0.0.5

Mozilla ≫ Firefox Version 2.0.0.6

Mozilla ≫ Firefox Version 2.0.0.7

Mozilla ≫ Firefox Version 2.0.0.8

Mozilla ≫ Firefox Version 2.0.0.9

Mozilla ≫ Firefox Version 2.0.0.10

Mozilla ≫ Firefox Version 2.0.0.11

Mozilla ≫ Firefox Version 2.0.0.12

Mozilla ≫ Firefox Version 2.0.0.13

Mozilla ≫ Firefox Version 2.0.0.14

Mozilla ≫ Firefox Version 2.0.0.15

Mozilla ≫ Firefox Version 2.0.0.16

Mozilla ≫ Firefox Version 2.0.0.17

Mozilla ≫ Firefox Version 2.0.0.18

Mozilla ≫ Firefox Version 2.0.0.19

Mozilla ≫ Firefox Version 2.0.0.20

Mozilla ≫ Firefox Version 3.0

Mozilla ≫ Firefox Version 3.0.1

Mozilla ≫ Firefox Version 3.0.2

Mozilla ≫ Firefox Version 3.0.3

Mozilla ≫ Firefox Version 3.0.4

Mozilla ≫ Firefox Version 3.0.5

Mozilla ≫ Firefox Version 3.0.6

Mozilla ≫ Firefox Version 3.0.7

Mozilla ≫ Firefox Version 3.0.8

Mozilla ≫ Firefox Version 3.0.9

Mozilla ≫ Firefox Version 3.0.10

Mozilla ≫ Firefox Version 3.0.11

Mozilla ≫ Firefox Version 3.0.12

Mozilla ≫ Firefox Version 3.0.13

Mozilla ≫ Firefox Version 3.0.14

Mozilla ≫ Firefox Version 3.0.15

Mozilla ≫ Firefox Version 3.0.16

Mozilla ≫ Firefox Version 3.0.17

Mozilla ≫ Firefox Version 3.5

Mozilla ≫ Firefox Version 3.5.1

Mozilla ≫ Firefox Version 3.5.2

Mozilla ≫ Firefox Version 3.5.3

Mozilla ≫ Firefox Version 3.5.4

Mozilla ≫ Firefox Version 3.5.5

Mozilla ≫ Firefox Version 3.5.6

Mozilla ≫ Thunderbird Version <= 3.0.3

Mozilla ≫ Thunderbird Version 0.1

Mozilla ≫ Thunderbird Version 0.2

Mozilla ≫ Thunderbird Version 0.3

Mozilla ≫ Thunderbird Version 0.4

Mozilla ≫ Thunderbird Version 0.5

Mozilla ≫ Thunderbird Version 0.6

Mozilla ≫ Thunderbird Version 0.7

Mozilla ≫ Thunderbird Version 0.7.1

Mozilla ≫ Thunderbird Version 0.7.2

Mozilla ≫ Thunderbird Version 0.7.3

Mozilla ≫ Thunderbird Version 0.8

Mozilla ≫ Thunderbird Version 0.9

Mozilla ≫ Thunderbird Version 1.0

Mozilla ≫ Thunderbird Version 1.0.1

Mozilla ≫ Thunderbird Version 1.0.2

Mozilla ≫ Thunderbird Version 1.0.3

Mozilla ≫ Thunderbird Version 1.0.4

Mozilla ≫ Thunderbird Version 1.0.5

Mozilla ≫ Thunderbird Version 1.0.6

Mozilla ≫ Thunderbird Version 1.0.7

Mozilla ≫ Thunderbird Version 1.0.8

Mozilla ≫ Thunderbird Version 1.5

Mozilla ≫ Thunderbird Version 1.5 Update beta2

Mozilla ≫ Thunderbird Version 1.5.0.1

Mozilla ≫ Thunderbird Version 1.5.0.2

Mozilla ≫ Thunderbird Version 1.5.0.3

Mozilla ≫ Thunderbird Version 1.5.0.4

Mozilla ≫ Thunderbird Version 1.5.0.5

Mozilla ≫ Thunderbird Version 1.5.0.6

Mozilla ≫ Thunderbird Version 1.5.0.7

Mozilla ≫ Thunderbird Version 1.5.0.8

Mozilla ≫ Thunderbird Version 1.5.0.9

Mozilla ≫ Thunderbird Version 1.5.0.10

Mozilla ≫ Thunderbird Version 1.5.0.11

Mozilla ≫ Thunderbird Version 1.5.0.12

Mozilla ≫ Thunderbird Version 1.5.0.13

Mozilla ≫ Thunderbird Version 1.5.0.14

Mozilla ≫ Thunderbird Version 1.5.1

Mozilla ≫ Thunderbird Version 1.5.2

Mozilla ≫ Thunderbird Version 2.0

Mozilla ≫ Thunderbird Version 2.0.0.0

Mozilla ≫ Thunderbird Version 2.0.0.1

Mozilla ≫ Thunderbird Version 2.0.0.2

Mozilla ≫ Thunderbird Version 2.0.0.3

Mozilla ≫ Thunderbird Version 2.0.0.4

Mozilla ≫ Thunderbird Version 2.0.0.5

Mozilla ≫ Thunderbird Version 2.0.0.6

Mozilla ≫ Thunderbird Version 2.0.0.7

Mozilla ≫ Thunderbird Version 2.0.0.8

Mozilla ≫ Thunderbird Version 2.0.0.9

Mozilla ≫ Thunderbird Version 2.0.0.12

Mozilla ≫ Thunderbird Version 2.0.0.14

Mozilla ≫ Thunderbird Version 2.0.0.16

Mozilla ≫ Thunderbird Version 2.0.0.17

Mozilla ≫ Thunderbird Version 2.0.0.18

Mozilla ≫ Thunderbird Version 2.0.0.19

Mozilla ≫ Thunderbird Version 2.0.0.21

Mozilla ≫ Thunderbird Version 2.0.0.22

Mozilla ≫ Thunderbird Version 2.0.0.23

Mozilla ≫ Thunderbird Version 3.0.1

Mozilla ≫ Thunderbird Version 3.0.2

Mozilla ≫ Seamonkey Version <= 2.0.3

Mozilla ≫ Seamonkey Version 1.0

Mozilla ≫ Seamonkey Version 1.0 Update alpha

Mozilla ≫ Seamonkey Version 1.0 Update beta

Mozilla ≫ Seamonkey Version 1.0.1

Mozilla ≫ Seamonkey Version 1.0.2

Mozilla ≫ Seamonkey Version 1.0.3

Mozilla ≫ Seamonkey Version 1.0.4

Mozilla ≫ Seamonkey Version 1.0.5

Mozilla ≫ Seamonkey Version 1.0.6

Mozilla ≫ Seamonkey Version 1.0.7

Mozilla ≫ Seamonkey Version 1.0.8

Mozilla ≫ Seamonkey Version 1.0.9

Mozilla ≫ Seamonkey Version 1.1

Mozilla ≫ Seamonkey Version 1.1 Update alpha

Mozilla ≫ Seamonkey Version 1.1 Update beta

Mozilla ≫ Seamonkey Version 1.1.1

Mozilla ≫ Seamonkey Version 1.1.2

Mozilla ≫ Seamonkey Version 1.1.3

Mozilla ≫ Seamonkey Version 1.1.4

Mozilla ≫ Seamonkey Version 1.1.5

Mozilla ≫ Seamonkey Version 1.1.6

Mozilla ≫ Seamonkey Version 1.1.7

Mozilla ≫ Seamonkey Version 1.1.8

Mozilla ≫ Seamonkey Version 1.1.9

Mozilla ≫ Seamonkey Version 1.1.10

Mozilla ≫ Seamonkey Version 1.1.11

Mozilla ≫ Seamonkey Version 1.1.12

Mozilla ≫ Seamonkey Version 1.1.13

Mozilla ≫ Seamonkey Version 1.1.14

Mozilla ≫ Seamonkey Version 1.1.15

Mozilla ≫ Seamonkey Version 1.1.16

Mozilla ≫ Seamonkey Version 1.1.17

Mozilla ≫ Seamonkey Version 1.1.18

Mozilla ≫ Seamonkey Version 1.1.19

Mozilla ≫ Seamonkey Version 2.0

Mozilla ≫ Seamonkey Version 2.0 Update alpha_1

Mozilla ≫ Seamonkey Version 2.0 Update alpha_2

Mozilla ≫ Seamonkey Version 2.0 Update alpha_3

Mozilla ≫ Seamonkey Version 2.0 Update beta_1

Mozilla ≫ Seamonkey Version 2.0 Update beta_2

Mozilla ≫ Seamonkey Version 2.0 Update rc1

Mozilla ≫ Seamonkey Version 2.0 Update rc2

Mozilla ≫ Seamonkey Version 2.0.1

Mozilla ≫ Seamonkey Version 2.0.2

Mozilla ≫ Seamonkey Version 2.0.4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.19%	0.639

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

http://support.avaya.com/css/P8/documents/100091069

http://www.redhat.com/support/errata/RHSA-2010-0500.html

http://www.redhat.com/support/errata/RHSA-2010-0501.html

http://www.vupen.com/english/advisories/2010/1557

http://www.vupen.com/english/advisories/2010/0748

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:070

http://secunia.com/advisories/39397

http://ubuntu.com/usn/usn-921-1

http://www.vupen.com/english/advisories/2010/0849

http://www.mozilla.org/security/announce/2010/mfsa2010-24.html

http://www.securityfocus.com/bid/39479

https://bugzilla.mozilla.org/show_bug.cgi?id=490790

https://exchange.xforce.ibmcloud.com/vulnerabilities/57396

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375

https://nvd.nist.gov/vuln/detail/CVE-2010-0182

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0182

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0182

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-0182