CVE ID:	CVE-2010-0182
Description:	The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
Test IDs:	1.3.6.1.4.1.25623.1.0.67832
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0182 BugTraq ID: 39479 http://www.securityfocus.com/bid/39479 http://www.mandriva.com/security/advisories?name=MDVSA-2010:070 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375 RedHat Security Advisories: RHSA-2010:0500 http://www.redhat.com/support/errata/RHSA-2010-0500.html RedHat Security Advisories: RHSA-2010:0501 http://www.redhat.com/support/errata/RHSA-2010-0501.html http://secunia.com/advisories/39397 SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://ubuntu.com/usn/usn-921-1 http://www.vupen.com/english/advisories/2010/0748 http://www.vupen.com/english/advisories/2010/0849 http://www.vupen.com/english/advisories/2010/1557 XForce ISS Database: firefox-xmldocumentload-weak-security(57396) https://exchange.xforce.ibmcloud.com/vulnerabilities/57396