CVE-2010-3171

CVE-2010-3171 describes a vulnerability in the Math.random function within Mozilla Firefox versions 3.5.10-3.5.11, 3.6.4-3.6.8, and 4.0 Beta1. The flaw stems from the random number generator being seeded only once per document object, making it susceptible to seed value calculation. This medium-severity vulnerability (CVSS 5.8) allows remote attackers to track users or facilitate in-session phishing attacks due to the network-based attack vector and medium attack complexity, potentially leading to partial confidentiality and integrity compromise. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-34621) exists, and the CVE has minimal community discussion or media coverage.