[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

111666

 
 

909

 
 

87321

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2010-3168Date: (C)2010-09-09   (M)2018-06-11


Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECUNIA-42867
BID-43108
ADV-2010-2323
ADV-2011-0061
DSA-2106
FEDORA-2010-14362
MDVSA-2010:173
SUSE-SA:2010:049
firefox-xultree-objects-code-exec(61653)
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
http://support.avaya.com/css/P8/documents/100110210
http://support.avaya.com/css/P8/documents/100112690
http://www.mozilla.org/security/announce/2010/mfsa2010-55.html
https://bugzilla.mozilla.org/show_bug.cgi?id=576075

CPE    211
cpe:/a:mozilla:firefox:1.5:beta2
cpe:/a:mozilla:firefox:1.5:beta1
cpe:/a:mozilla:firefox:2.0.0.20
cpe:/a:mozilla:firefox:2.0.0.19
...
CWE    1
CWE-119
OVAL    31
oval:org.secpod.oval:def:400033
oval:org.secpod.oval:def:600161
oval:org.secpod.oval:def:700089
oval:org.secpod.oval:def:200057
...

© SecPod Technologies