cbcvebase.
CVE-2010-5074
published 2011-12-07

CVE-2010-5074: The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links…

PriorityP414medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
0.64%
47.2th percentile
The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences, which makes it easier for remote attackers to obtain sensitive information about visited web pages via a timing attack.

Affected

138 ranges· showing 25
VendorProductVersion rangeFixed in
mozillafirefox<= 3.6.24—
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.