Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/Thunderbird/SeaMonkey模块'chrome'权限提升漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Firebug附件组件的XMLHttpRequestSpy模块中存在chrome权限提升漏洞。在创建XMLHttpRequestSpy对象时，会将各种自身的属性附加到web内容所定义的对象上，但没有正确地包装这些对象以防暴露给chrome权限的对象，这可能导致攻击者在用户机器上运行任意JavaScript。成功攻击要求在Firefox浏览器上安装了Firebug附件组件。
CVSS Information
N/A
Vulnerability Type
N/A