[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2010-1198Date: (C)2010-06-24   (M)2024-03-27


Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1024138
SECUNIA-40326
SECUNIA-40401
SECUNIA-40481
BID-41050
BID-41102
ADV-2010-1551
ADV-2010-1556
ADV-2010-1557
ADV-2010-1592
ADV-2010-1640
ADV-2010-1773
FEDORA-2010-10344
FEDORA-2010-10361
MDVSA-2010:125
RHSA-2010:0499
RHSA-2010:0500
RHSA-2010:0501
SUSE-SA:2010:030
USN-930-1
USN-930-2
firefox-plugin-instances-code-exec(59664)
http://support.avaya.com/css/P8/documents/100091069
http://www.mozilla.org/security/announce/2010/mfsa2010-28.html
https://bugzilla.mozilla.org/show_bug.cgi?id=532246
oval:org.mitre.oval:def:10990
oval:org.mitre.oval:def:14176

CPE    58
cpe:/a:mozilla:firefox:3.5.7
cpe:/a:mozilla:firefox:3.5.5
cpe:/a:mozilla:firefox:3.5.6
cpe:/a:mozilla:firefox:3.5.9
...
CWE    1
CWE-399
OVAL    43
oval:org.secpod.oval:def:700155
oval:org.secpod.oval:def:400036
oval:org.secpod.oval:def:201957
oval:org.secpod.oval:def:700129
...

© SecPod Technologies