5.8

CVE-2010-3399

Exploit

EPSS 0.64%
Veröffentlicht 15.09.2010 20:00:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a context pointer in conjunction with its successor pointer for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2010-3171.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version3.5.10

Mozilla ≫ Firefox Version3.5.11

Mozilla ≫ Firefox Version3.6.4

Mozilla ≫ Firefox Version3.6.6

Mozilla ≫ Firefox Version3.6.7

Mozilla ≫ Firefox Version3.6.8

Mozilla ≫ Firefox Version4.0 Updatebeta1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.64%	0.679

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

https://bugzilla.mozilla.org/show_bug.cgi?id=475585

http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

http://secunia.com/advisories/42867

http://www.vupen.com/english/advisories/2011/0061

http://archives.neohapsis.com/archives/bugtraq/2010-09/0117.html

http://www.trusteer.com/sites/default/files/Cross_domain_Math_Random_leakage_in_FF_3.6.4-3.6.8.pdf

Exploit

https://bugzilla.mozilla.org/show_bug.cgi?id=577512

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7598

https://nvd.nist.gov/vuln/detail/CVE-2010-3399

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3399

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3399

EUVD