CVE-2010-1215

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.6.x before 3.6.7 Thunderbird versions 3.1.x before 3.1.1

Description The issue arises from improper implementation of access to a content object through a SafeJSObjectWrapper (SJOW) wrapper. This allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging access to an object from the chrome scope.

Recommendations For Mozilla Firefox versions 3.6.x before 3.6.7, update to version 3.6.7 or later to resolve the issue. For Thunderbird versions 3.1.x before 3.1.1, update to version 3.1.1 or later to resolve the issue.