Oval Definition:oval:org.mitre.oval:def:7598
Revision Date:2014-10-06Version:21
Title:Vulnerability in js_InitRandom function in the JavaScript implementation in Mozilla Firefox
Description:The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a context pointer in conjunction with its successor pointer for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2010-3171.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3399
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Mozilla Firefox
Definition Synopsis
  • Check if Mozilla Firefox version is 3.5.10 through 3.5.11 or 3.6.4 through 3.6.8 or equal to 4.0 Beta1
  • Mozilla Firefox Mainline version is 3.5.10 through 3.5.11
  • OR Mozilla Firefox Mainline version is 3.6.4 through 3.6.8
  • OR Mozilla Firefox Mainline version is 4.0 Beta1
  • AND Mozilla Firefox Mainline release is installed
    • BACK