Oval Definition:oval:org.mitre.oval:def:12202
Revision Date:2014-10-06Version:28
Title:Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9
Description:Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3177
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Mozilla Firefox
Mozilla Seamonkey
Definition Synopsis
  • Mozilla Firefox and version before 3.5.14 and 3.6.x before 3.6.11
  • Mozilla Firefox Mainline release is installed
  • AND Check for vulnerable version
  • Mozilla Firefox Mainline version is before 3.5.14
  • OR Mozilla Firefox Mainline version is 3.6.x before 3.6.11
  • OR Mozilla Seamonkey and version less than 2.0.9
  • Mozilla Seamonkey is installed
  • AND Check if the version of Mozilla Seamonkey is less than 2.0.9
  • BACK