Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox和SeaMonkey 代码注入漏洞
Vulnerability Description
Mozilla Firefox 2.0.0.2之前的2.x和1.5.0.10之前的1.x以及SeaMonkey 1.1.1之前的1.1和1.0.8之前的1.0版本中存在代码注入漏洞。远程攻击者可以借助一个带有HTML邮件信息,以用户的身份执行任意的JavaScript。该HTML邮件信息带有(1)img,(2)链接或(3)字体标签中的一个javascript:URI。借助chrome特权,可以绕过访问检验和执行代码。
CVSS Information
N/A
Vulnerability Type
N/A