Bug 578155 (CVE-2010-0179)

Summary:	CVE-2010-0179 Firefox Arbitrary code execution with Firebug XMLHttpRequestSpy
Product:	[Other] Security Response	Reporter:	Josh Bressers <bressers>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-06-05 06:29:19 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2010-03-30 12:21:59 UTC

Mozilla security researcher moz_bug_r_a4 reported that the
XMLHttpRequestSpy module in the Firebug add-on was exposing an underlying
chrome privilege escalation vulnerability. When the XMLHttpRequestSpy
object was created, it would attach various properties of itself to objects
defined in web content which were not being properly wrapped to prevent
their exposure to chrome privileged objects. This could result in an
attacker running arbitrary JavaScript on a victim's machine, though it
required the victim to have Firebug installed.

Comment 1 Josh Bressers 2010-03-30 20:50:40 UTC

This is now public
http://www.mozilla.org/security/announce/2010/mfsa2010-21.html

Comment 2 errata-xmlrpc 2010-03-30 23:29:07 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 5
  Red Hat Enterprise Linux 4

Via RHSA-2010:0332 https://rhn.redhat.com/errata/RHSA-2010-0332.html