CVE-2010-3170

no score yetEPSS 1.1%

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2010-10-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
mozilla:seamonkey
mozilla:thunderbird

References

http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
http://secunia.com/advisories/41839
http://secunia.com/advisories/42867
http://support.avaya.com/css/P8/documents/100114250

Check your stack JSON