CVE Vulnerabilities

CVE-2010-4508

Published: Dec 09, 2010 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
LOW

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an inherent problem with the WebSocket specification.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla 4.0-beta1 (including) 4.0-beta1 (including)
Firefox Mozilla 4.0-beta2 (including) 4.0-beta2 (including)
Firefox Mozilla 4.0-beta3 (including) 4.0-beta3 (including)
Firefox Mozilla 4.0-beta4 (including) 4.0-beta4 (including)
Firefox Mozilla 4.0-beta5 (including) 4.0-beta5 (including)
Firefox Mozilla 4.0-beta6 (including) 4.0-beta6 (including)
Firefox Ubuntu dapper *
Firefox Ubuntu devel *
Firefox Ubuntu hardy *
Firefox Ubuntu upstream *

References