CVE-2010-4508 in Firefox
Summary
The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
12/09/2010
Disclosure
12/09/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55693 | Mozilla Firefox WebSockets Remote Code Execution | Not defined | Official fix | CVE-2010-4508 |