CVE-2010-3770

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.45% chance of exploitation in the next 30 days, 91st percentile

Published

2010-12-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35095

Security advisories

• http://www.mozilla.org/security/announce/2010/mfsa2010-84.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=601429
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:251
• http://www.redhat.com/support/errata/RHSA-2010-0966.html
• http://www.securityfocus.com/bid/45353
• http://www.ubuntu.com/usn/USN-1019-1

References

• CVE Record
• NVD entry