Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/Thunderbird/SeaMonkey 跨站脚本漏洞
Vulnerability Description
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 15.0之前版本、Thunderbird 15.0之前版本、SeaMonkey 2.12之前版本中存在漏洞，该漏洞源于未阻止使用‘Object.defineProperty’方法隐藏位置对象(又名window.location)。远程攻击者可利用该漏洞通过包含插件的向量进行跨站脚本(XSS)攻击。
CVSS Information
N/A
Vulnerability Type
N/A