Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2139?format=api",
    "vulnerability_id": "VCID-pjqn-kghb-k7fs",
    "summary": "Mozilla developer Wladimir Palant reported that\nstylesheets used in remote XUL documents can wind up in the XUL cache\nwhere it can later be accessed by browser chrome for use in styling\nthe user interface.  A malicious website could use this issue to\npollute a user's XUL cache and change style attributes of their\nbrowser such as font size and color.",
    "aliases": [
        {
            "alias": "CVE-2010-0169"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/990?format=api",
            "purl": "pkg:mozilla/Firefox@3.0.18",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.0.18"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/989?format=api",
            "purl": "pkg:mozilla/Firefox@3.5.8",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.5.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/975?format=api",
            "purl": "pkg:mozilla/Firefox@3.6.2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.6.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/992?format=api",
            "purl": "pkg:mozilla/SeaMonkey@2.0.3",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@2.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/991?format=api",
            "purl": "pkg:mozilla/Thunderbird@3.0.2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@3.0.2"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0169",
            "reference_id": "CVE-2010-0169",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0169"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2010-14",
            "reference_id": "mfsa2010-14",
            "reference_type": "",
            "scores": [
                {
                    "value": "low",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2010-14"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "0.1 - 3",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pjqn-kghb-k7fs"
}