← Back

CVE-2010-5074

nvd nist
Published: Dec 7, 2011Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences, which makes it easier for remote attackers to obtain sensitive information about visited web pages via a timing attack.

Affected (150)

Mozilla
3 products
Firefox
Thunderbird
Seamonkey
Configuration A
58 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Up to 3.6.24
Firefox
Version 3.0.10
Firefox
Version 3.0.11
Firefox
Version 3.0.12
Firefox
Version 3.0.13
Firefox
Version 3.0.14
Firefox
Version 3.0.15
Firefox
Version 3.0.16
Firefox
Version 3.0.17
Firefox
Version 3.0.1
Firefox
Version 3.0.2
Firefox
Version 3.0.3
Firefox
Version 3.0.4
Firefox
Version 3.0.5
Firefox
Version 3.0.6
Firefox
Version 3.0.7
Firefox
Version 3.0.8
Firefox
Version 3.0.9
Firefox
Version 3.0
Firefox
Version 3.5.10
Firefox
Version 3.5.11
Firefox
Version 3.5.12
Firefox
Version 3.5.13
Firefox
Version 3.5.14
Firefox
Version 3.5.15
Firefox
Version 3.5.1
Firefox
Version 3.5.2
Firefox
Version 3.5.3
Firefox
Version 3.5.4
Firefox
Version 3.5.5
Firefox
Version 3.5.6
Firefox
Version 3.5.7
Firefox
Version 3.5.8
Firefox
Version 3.5.9
Firefox
Version 3.5
Firefox
Version 3.6.10
Firefox
Version 3.6.11
Firefox
Version 3.6.12
Firefox
Version 3.6.13
Firefox
Version 3.6.14
Firefox
Version 3.6.15
Firefox
Version 3.6.16
Firefox
Version 3.6.17
Firefox
Version 3.6.18
Firefox
Version 3.6.19
Firefox
Version 3.6.1
Firefox
Version 3.6.20
Firefox
Version 3.6.21
Firefox
Version 3.6.22
Firefox
Version 3.6.23
Firefox
Version 3.6.2
Firefox
Version 3.6.3
Firefox
Version 3.6.4
Firefox
Version 3.6.6
Firefox
Version 3.6.7
Firefox
Version 3.6.8
Firefox
Version 3.6.9
Firefox
Version 3.6
Configuration B
29 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Thunderbird
Up to 3.1.16
Thunderbird
Version 3.0.10
Thunderbird
Version 3.0.11
Thunderbird
Version 3.0.1
Thunderbird
Version 3.0.2
Thunderbird
Version 3.0.3
Thunderbird
Version 3.0.4
Thunderbird
Version 3.0.5
Thunderbird
Version 3.0.6
Thunderbird
Version 3.0.7
Thunderbird
Version 3.0.8
Thunderbird
Version 3.0.9
Thunderbird
Version 3.0
Thunderbird
Version 3.1.10
Thunderbird
Version 3.1.11
Thunderbird
Version 3.1.12
Thunderbird
Version 3.1.13
Thunderbird
Version 3.1.14
Thunderbird
Version 3.1.15
Thunderbird
Version 3.1.1
Thunderbird
Version 3.1.2
Thunderbird
Version 3.1.3
Thunderbird
Version 3.1.4
Thunderbird
Version 3.1.5
Thunderbird
Version 3.1.6
Thunderbird
Version 3.1.7
Thunderbird
Version 3.1.8
Thunderbird
Version 3.1.9
Thunderbird
Version 3.1
Configuration C
63 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Seamonkey
Up to 2.1
Seamonkey
Version 1.0.1
Seamonkey
Version 1.0.2
Seamonkey
Version 1.0.3
Seamonkey
Version 1.0.4
Seamonkey
Version 1.0.5
Seamonkey
Version 1.0.6
Seamonkey
Version 1.0.7
Seamonkey
Version 1.0.8
Seamonkey
Version 1.0.9
Seamonkey
Version 1.0
Seamonkey
Version 1.0 alpha
Seamonkey
Version 1.0 beta
Seamonkey
Version 1.1.10
Seamonkey
Version 1.1.11
Seamonkey
Version 1.1.12
Seamonkey
Version 1.1.13
Seamonkey
Version 1.1.14
Seamonkey
Version 1.1.15
Seamonkey
Version 1.1.16
Seamonkey
Version 1.1.17
Seamonkey
Version 1.1.18
Seamonkey
Version 1.1.19
Seamonkey
Version 1.1.1
Seamonkey
Version 1.1.2
Seamonkey
Version 1.1.3
Seamonkey
Version 1.1.4
Seamonkey
Version 1.1.5
Seamonkey
Version 1.1.6
Seamonkey
Version 1.1.7
Seamonkey
Version 1.1.8
Seamonkey
Version 1.1.9
Seamonkey
Version 1.1
Seamonkey
Version 1.1 alpha
Seamonkey
Version 1.1 beta
Seamonkey
Version 1.5.0.10
Seamonkey
Version 1.5.0.8
Seamonkey
Version 1.5.0.9
Seamonkey
Version 2.0.10
Seamonkey
Version 2.0.11
Seamonkey
Version 2.0.12
Seamonkey
Version 2.0.13
Seamonkey
Version 2.0.14
Seamonkey
Version 2.0.1
Seamonkey
Version 2.0.2
Seamonkey
Version 2.0.3
Seamonkey
Version 2.0.4
Seamonkey
Version 2.0.5
Seamonkey
Version 2.0.6
Seamonkey
Version 2.0.7
Seamonkey
Version 2.0.8
Seamonkey
Version 2.0.9
Seamonkey
Version 2.0
Seamonkey
Version 2.0 alpha_1
Seamonkey
Version 2.0 alpha_2
Seamonkey
Version 2.0 alpha_3
Seamonkey
Version 2.0 beta_1
Seamonkey
Version 2.0 beta_2
Seamonkey
Version 2.0 rc1
Seamonkey
Version 2.0 rc2
Seamonkey
Version 2.0a1
Seamonkey
Version 2.1 alpha1
Seamonkey
Version 2.1 alpha2

Related CWEs

CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.