Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/SeaMonkey/Thunderbird SafeJSObjectWrapper实施XPCSafeJSObjectWrapper类跨站脚本攻击漏洞
Vulnerability Description
Mozilla Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。 Mozilla Firefox 3.5.12之前的版本, Thunderbird 3.0.7之前的版本和SeaMonkey 2.0.7之前版本中的SafeJSObjectWrapper (又名SJOW)实施中的XPCSafeJSObjectWrapper类不能正确限制脚本函数。远程攻击者可以借助特制函数绕过同源策略，并进行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A