Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-2769

Fixed in a distro release EPSS 2%

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.

Published 2010-09-09 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 5.0xulrunner1.9.0.19-6
Debian 5.0xulrunner1.9.0.19-4
Red Hat Enterprise Linux 4firefox0:3.6.9-1.el4
Red Hat Enterprise Linux 4firefox-debuginfo0:3.6.9-1.el4
Red Hat Enterprise Linux 4nspr0:4.8.6-1.el4
Red Hat Enterprise Linux 4nspr-debuginfo0:4.8.6-1.el4
Red Hat Enterprise Linux 4nspr-devel0:4.8.6-1.el4
Red Hat Enterprise Linux 4nss0:3.12.7-1.el4
Red Hat Enterprise Linux 4nss-debuginfo0:3.12.7-1.el4
Red Hat Enterprise Linux 4nss-devel0:3.12.7-1.el4
Red Hat Enterprise Linux 4nss-tools0:3.12.7-1.el4
Red Hat Enterprise Linux 5firefox0:3.6.9-2.el5
Red Hat Enterprise Linux 5firefox-debuginfo0:3.6.9-2.el5
Red Hat Enterprise Linux 5nspr0:4.8.6-1.el5
Red Hat Enterprise Linux 5nspr-debuginfo0:4.8.6-1.el5
Red Hat Enterprise Linux 5nspr-devel0:4.8.6-1.el5
Red Hat Enterprise Linux 5nss0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-debuginfo0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-devel0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-pkcs11-devel0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-tools0:3.12.7-2.el5
Red Hat Enterprise Linux 5xulrunner0:1.9.2.9-1.el5
Red Hat Enterprise Linux 5xulrunner-debuginfo0:1.9.2.9-1.el5
Red Hat Enterprise Linux 5xulrunner-devel0:1.9.2.9-1.el5
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1