The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-force attack, a different vulnerability than CVE-2008-5913.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2010-09-15T19:00:00
Updated: 2024-08-07T03:11:43.389Z
Reserved: 2010-09-15T00:00:00
Link: CVE-2010-3400

No data.

Status : Deferred
Published: 2010-09-15T20:00:02.790
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-3400

No data.