Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/Thunderbird SafeJSObjectWrapper实施XPCSafeJSObjectWrapper类权限许可和访问控制漏洞
Vulnerability Description
Mozilla Firefox/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。 Mozilla Firefox 3.6.9之前的3.6.x版本和Thunderbird 3.1.3之前的3.1.x版本中的SafeJSObjectWrapper(又名SJOW)实施中的XPCSafeJSObjectWrapper类不能正确限制范围链末端的对象。远程攻击者可以借助与chrome特权对象和外部对象上的链末端有关的向量执行任意JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A