CVE-2010-3775 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-3775 Interim 1 17 2023-12-09T01:54:34Z current 2021-05-30T12:54:07Z 2023-12-09T01:54:34Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-3775 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APY3FMB7NPSOPY6CSSLMQ7MWZQ6NCPPW/#APY3FMB7NPSOPY6CSSLMQ7MWZQ6NCPPW E-Mail link for SUSE-SA:2011:003 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 openSUSE Tumbleweed MozillaFirefox-10.0-0.3.2 MozillaFirefox-17.0.4esr-0.10.42 MozillaFirefox-3.6.13-0.7.1 MozillaFirefox-31.7.0esr-0.8.1 MozillaFirefox-devel-31.7.0esr-0.8.1 MozillaFirefox-translations-10.0-0.3.2 MozillaFirefox-translations-17.0.4esr-0.10.42 MozillaFirefox-translations-3.6.13-0.7.1 MozillaFirefox-translations-31.7.0esr-0.8.1 mozilla-xulrunner191-1.9.1.16-0.1.1 mozilla-xulrunner191-32bit-1.9.1.16-0.1.1 mozilla-xulrunner191-gnomevfs-1.9.1.16-0.1.1 mozilla-xulrunner191-translations-1.9.1.16-0.1.1 mozilla-xulrunner192-1.9.2.13-1.7.1 mozilla-xulrunner192-1.9.2.24-0.3.1 mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-32bit-1.9.2.13-1.7.1 mozilla-xulrunner192-32bit-1.9.2.24-0.3.2 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-devel-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.13-1.7.1 mozilla-xulrunner192-gnome-1.9.2.24-0.3.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.13-1.7.1 mozilla-xulrunner192-translations-1.9.2.24-0.3.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-x86-1.9.2.24-0.3.1 mozilla-xulrunner192-x86-1.9.2.27-0.2.1 seamonkey-2.40-6.1 seamonkey-dom-inspector-2.40-6.1 seamonkey-irc-2.40-6.1 seamonkey-translations-common-2.40-6.1 seamonkey-translations-other-2.40-6.1 MozillaFirefox-3.6.13-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-translations-3.6.13-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-32bit-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-gnomevfs-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-translations-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-32bit-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-gnome-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-translations-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-10.0-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 MozillaFirefox-translations-10.0-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-32bit-1.9.2.24-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-gnome-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-translations-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-x86-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 MozillaFirefox-17.0.4esr-0.10.42 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-translations-17.0.4esr-0.10.42 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-x86-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-x86-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-devel-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mozilla-xulrunner192-devel-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 seamonkey-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-dom-inspector-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-irc-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-translations-common-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-translations-other-2.40-6.1 as a component of openSUSE Tumbleweed Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used. CVE-2010-3775 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-3.6.13-0.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-translations-3.6.13-0.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-32bit-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-gnomevfs-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-translations-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-32bit-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-gnome-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-translations-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP2:MozillaFirefox-10.0-0.3.2 SUSE Linux Enterprise Server 11 SP2:MozillaFirefox-translations-10.0-0.3.2 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-32bit-1.9.2.24-0.3.2 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-gnome-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-translations-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-x86-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-17.0.4esr-0.10.42 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-17.0.4esr-0.10.42 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-translations-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-x86-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-translations-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-x86-1.9.2.27-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mozilla-xulrunner192-devel-1.9.2.27-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 openSUSE Tumbleweed:seamonkey-2.40-6.1 openSUSE Tumbleweed:seamonkey-dom-inspector-2.40-6.1 openSUSE Tumbleweed:seamonkey-irc-2.40-6.1 openSUSE Tumbleweed:seamonkey-translations-common-2.40-6.1 openSUSE Tumbleweed:seamonkey-translations-other-2.40-6.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C