CVE-2010-1207

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.

Published: Jul 30, 2010
Updated: Apr 13, 2023
CVE: CVE-2010-1207
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
mozilla / firefox	3.6.2	3.6.2.x
mozilla / firefox	3.6.3	3.6.3.x
mozilla / thunderbird	-	3.1.x
mozilla / firefox	-	3.6.6.x
mozilla / firefox	3.6.4	3.6.4.x
mozilla / firefox	3.6	3.6.x

http://www.mozilla.org/security/announce/2010/mfsa2010-43.html
https://bugzilla.mozilla.org/show_bug.cgi?id=571287
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11887

Vulnerability Database

CVE-2010-1207