CVE-2010-4508

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 69.38%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
4.0:beta1
mozillafirefox_esr
4.0:beta1
mozillafirefox
4.0:beta2
mozillafirefox_esr
4.0:beta2
mozillafirefox
4.0:beta3
mozillafirefox_esr
4.0:beta3
mozillafirefox
4.0:beta4
mozillafirefox_esr
4.0:beta4
mozillafirefox
4.0:beta5
mozillafirefox_esr
4.0:beta5
mozillafirefox
4.0:beta6
mozillafirefox_esr
4.0:beta6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
dapper
ignored
hardy
ignored
karmic
dne
lucid
not-affected
maverick
not-affected