Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2010-3774 to a friend New vulnerability? New tool? Tell us	CVE-2010-3774 Mozilla Firefox Pseudo URL Same Origin Policy Security Bypass Vulnerability     Credit: The original article can be found at: http://www.securityfocus.com/bid/45314 The information has been provided by Michal Zalewski Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2010-3774 Details Check for CVE-2010-3774 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Mozilla Firefox 3.6.10  * Mozilla Firefox 3.6.9  * Mozilla Firefox 3.6.8  * Mozilla Firefox 3.6.6  * Mozilla Firefox 3.6.4  * Mozilla Firefox 3.6.3  * Mozilla Firefox 3.6.2  * Mozilla Firefox 3.6.2  * Mozilla Firefox 3.5.17  * Mozilla Firefox 3.5.14  * Mozilla Firefox 3.5.13  * Mozilla Firefox 3.5.10  * Mozilla Firefox 3.5.10  * Mozilla Firefox 3.5.9  * Mozilla Firefox 3.5.8  * Mozilla Firefox 3.5.7  * Mozilla Firefox 3.5.6  * Mozilla Firefox 3.5.5  * Mozilla Firefox 3.5.4  * Mozilla Firefox 3.5.3  * Mozilla Firefox 3.5.2  * Mozilla Firefox 3.5.1  * Mozilla Firefox 3.5  * Mozilla Firefox 3.6.7  * Mozilla Firefox 3.6.6  * Mozilla Firefox 3.6.12  * Mozilla Firefox 3.6.11  * Mozilla Firefox 3.5.15  * Mozilla Firefox 3.5.12  * Mozilla Firefox 3.5.11 Non-Vulnerable Systems:  * Mozilla Firefox 3.6.13 Attackers can exploit this issue to bypass the same-origin policy. Successful exploits may allow attacker to mislead unsuspecting victims, steal sensitive information, or launch other attacks. Vendor Status: Mozilla as issued an update for this vulnerablity Patch Availability: http://www.mozilla.org/en-US/products/download.html?product=firefox-12.0&os=win&lang=en-US CVE Information: CVE-2010-3774 Disclosure Timeline: Initial Release Dec 21 2011  Comments on CVE-2010-3774:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®