Total vulnerabilities in the database
Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | - | 3.0.12 |
| fedoraproject / fedora | 10 | 10.x |
| opensuse / opensuse | 11.1 | 11.1.x |
| opensuse / opensuse | 11.0 | 11.0.x |
| suse / linux_enterprise_server | 10-sp2 | 10-sp2.x |
| suse / linux_enterprise_desktop | 10-sp2 | 10-sp2.x |
| suse / linux_enterprise_server | 11 | 11.x |
| suse / linux_enterprise_desktop | 11 | 11.x |
| suse / linux_enterprise_debuginfo | 10-sp2 | 10-sp2.x |
| suse / linux_enterprise_debuginfo | 11 | 11.x |