CVE-2010-0172

no score yetEPSS 1.4%

mozilla firefox: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-11-01)
Published: 2010-03-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://www.mandriva.com/security/advisories?name=MDVSA-2010:070
http://www.mozilla.org/security/announce/2010/mfsa2010-15.html
http://www.securityfocus.com/bid/38918
http://www.vupen.com/english/advisories/2010/0692
https://bugzilla.mozilla.org/show_bug.cgi?id=537862

Check your stack JSON