← Database

CVE-2010-1207

MEDIUM CVSS: 4.3 Published: 2010-07-30 Modified: 2026-06-16

Description

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-264

References