CVE-2010-3765

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
References
Link Resource
http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ Vendor Advisory
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
http://isc.sans.edu/diary.html?storyid=9817
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter
http://secunia.com/advisories/41761 Vendor Advisory
http://secunia.com/advisories/41965 Vendor Advisory
http://secunia.com/advisories/41966 Vendor Advisory
http://secunia.com/advisories/41969 Vendor Advisory
http://secunia.com/advisories/41975 Vendor Advisory
http://secunia.com/advisories/42003 Vendor Advisory
http://secunia.com/advisories/42008 Vendor Advisory
http://secunia.com/advisories/42043 Vendor Advisory
http://secunia.com/advisories/42867 Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706
http://support.avaya.com/css/P8/documents/100114329
http://support.avaya.com/css/P8/documents/100114335
http://www.debian.org/security/2010/dsa-2124
http://www.exploit-db.com/exploits/15341 Exploit
http://www.exploit-db.com/exploits/15342 Exploit
http://www.exploit-db.com/exploits/15352 Exploit
http://www.mandriva.com/security/advisories?name=MDVSA-2010:213
http://www.mandriva.com/security/advisories?name=MDVSA-2010:219
http://www.mozilla.org/security/announce/2010/mfsa2010-73.html
http://www.norman.com/about_norman/press_center/news_archive/2010/129223/
http://www.norman.com/security_center/virus_description_archive/129146/
http://www.redhat.com/support/errata/RHSA-2010-0808.html
http://www.redhat.com/support/errata/RHSA-2010-0809.html
http://www.redhat.com/support/errata/RHSA-2010-0810.html
http://www.redhat.com/support/errata/RHSA-2010-0861.html
http://www.redhat.com/support/errata/RHSA-2010-0896.html
http://www.securityfocus.com/bid/44425
http://www.securitytracker.com/id?1024645
http://www.securitytracker.com/id?1024650
http://www.securitytracker.com/id?1024651
http://www.ubuntu.com/usn/USN-1011-2
http://www.ubuntu.com/usn/USN-1011-3
http://www.ubuntu.com/usn/usn-1011-1
http://www.vupen.com/english/advisories/2010/2837 Vendor Advisory
http://www.vupen.com/english/advisories/2010/2857 Vendor Advisory
http://www.vupen.com/english/advisories/2010/2864 Vendor Advisory
http://www.vupen.com/english/advisories/2010/2871 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0061 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=607222
https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53
https://bugzilla.redhat.com/show_bug.cgi?id=646997
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108
https://rhn.redhat.com/errata/RHSA-2010-0812.html
http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ Vendor Advisory
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
http://isc.sans.edu/diary.html?storyid=9817
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter
http://secunia.com/advisories/41761 Vendor Advisory
http://secunia.com/advisories/41965 Vendor Advisory
http://secunia.com/advisories/41966 Vendor Advisory
http://secunia.com/advisories/41969 Vendor Advisory
http://secunia.com/advisories/41975 Vendor Advisory
http://secunia.com/advisories/42003 Vendor Advisory
http://secunia.com/advisories/42008 Vendor Advisory
http://secunia.com/advisories/42043 Vendor Advisory
http://secunia.com/advisories/42867 Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706
http://support.avaya.com/css/P8/documents/100114329
http://support.avaya.com/css/P8/documents/100114335
http://www.debian.org/security/2010/dsa-2124
http://www.exploit-db.com/exploits/15341 Exploit
http://www.exploit-db.com/exploits/15342 Exploit
http://www.exploit-db.com/exploits/15352 Exploit
http://www.mandriva.com/security/advisories?name=MDVSA-2010:213
http://www.mandriva.com/security/advisories?name=MDVSA-2010:219
http://www.mozilla.org/security/announce/2010/mfsa2010-73.html
http://www.norman.com/about_norman/press_center/news_archive/2010/129223/
http://www.norman.com/security_center/virus_description_archive/129146/
http://www.redhat.com/support/errata/RHSA-2010-0808.html
http://www.redhat.com/support/errata/RHSA-2010-0809.html
http://www.redhat.com/support/errata/RHSA-2010-0810.html
http://www.redhat.com/support/errata/RHSA-2010-0861.html
http://www.redhat.com/support/errata/RHSA-2010-0896.html
http://www.securityfocus.com/bid/44425
http://www.securitytracker.com/id?1024645
http://www.securitytracker.com/id?1024650
http://www.securitytracker.com/id?1024651
http://www.ubuntu.com/usn/USN-1011-2
http://www.ubuntu.com/usn/USN-1011-3
http://www.ubuntu.com/usn/usn-1011-1
http://www.vupen.com/english/advisories/2010/2837 Vendor Advisory
http://www.vupen.com/english/advisories/2010/2857 Vendor Advisory
http://www.vupen.com/english/advisories/2010/2864 Vendor Advisory
http://www.vupen.com/english/advisories/2010/2871 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0061 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=607222
https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53
https://bugzilla.redhat.com/show_bug.cgi?id=646997
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108
https://rhn.redhat.com/errata/RHSA-2010-0812.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.11:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.12:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.13:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.5.14:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:3.1.5:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*

History

21 Nov 2024, 01:19

Type Values Removed Values Added
References () http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ - Vendor Advisory () http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ - Vendor Advisory
References () http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - () http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox -
References () http://isc.sans.edu/diary.html?storyid=9817 - () http://isc.sans.edu/diary.html?storyid=9817 -
References () http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html - () http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html - () http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - () http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html - () http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html -
References () http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter - () http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter -
References () http://secunia.com/advisories/41761 - Vendor Advisory () http://secunia.com/advisories/41761 - Vendor Advisory
References () http://secunia.com/advisories/41965 - Vendor Advisory () http://secunia.com/advisories/41965 - Vendor Advisory
References () http://secunia.com/advisories/41966 - Vendor Advisory () http://secunia.com/advisories/41966 - Vendor Advisory
References () http://secunia.com/advisories/41969 - Vendor Advisory () http://secunia.com/advisories/41969 - Vendor Advisory
References () http://secunia.com/advisories/41975 - Vendor Advisory () http://secunia.com/advisories/41975 - Vendor Advisory
References () http://secunia.com/advisories/42003 - Vendor Advisory () http://secunia.com/advisories/42003 - Vendor Advisory
References () http://secunia.com/advisories/42008 - Vendor Advisory () http://secunia.com/advisories/42008 - Vendor Advisory
References () http://secunia.com/advisories/42043 - Vendor Advisory () http://secunia.com/advisories/42043 - Vendor Advisory
References () http://secunia.com/advisories/42867 - Vendor Advisory () http://secunia.com/advisories/42867 - Vendor Advisory
References () http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706 - () http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706 -
References () http://support.avaya.com/css/P8/documents/100114329 - () http://support.avaya.com/css/P8/documents/100114329 -
References () http://support.avaya.com/css/P8/documents/100114335 - () http://support.avaya.com/css/P8/documents/100114335 -
References () http://www.debian.org/security/2010/dsa-2124 - () http://www.debian.org/security/2010/dsa-2124 -
References () http://www.exploit-db.com/exploits/15341 - Exploit () http://www.exploit-db.com/exploits/15341 - Exploit
References () http://www.exploit-db.com/exploits/15342 - Exploit () http://www.exploit-db.com/exploits/15342 - Exploit
References () http://www.exploit-db.com/exploits/15352 - Exploit () http://www.exploit-db.com/exploits/15352 - Exploit
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:213 - () http://www.mandriva.com/security/advisories?name=MDVSA-2010:213 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:219 - () http://www.mandriva.com/security/advisories?name=MDVSA-2010:219 -
References () http://www.mozilla.org/security/announce/2010/mfsa2010-73.html - () http://www.mozilla.org/security/announce/2010/mfsa2010-73.html -
References () http://www.norman.com/about_norman/press_center/news_archive/2010/129223/ - () http://www.norman.com/about_norman/press_center/news_archive/2010/129223/ -
References () http://www.norman.com/security_center/virus_description_archive/129146/ - () http://www.norman.com/security_center/virus_description_archive/129146/ -
References () http://www.redhat.com/support/errata/RHSA-2010-0808.html - () http://www.redhat.com/support/errata/RHSA-2010-0808.html -
References () http://www.redhat.com/support/errata/RHSA-2010-0809.html - () http://www.redhat.com/support/errata/RHSA-2010-0809.html -
References () http://www.redhat.com/support/errata/RHSA-2010-0810.html - () http://www.redhat.com/support/errata/RHSA-2010-0810.html -
References () http://www.redhat.com/support/errata/RHSA-2010-0861.html - () http://www.redhat.com/support/errata/RHSA-2010-0861.html -
References () http://www.redhat.com/support/errata/RHSA-2010-0896.html - () http://www.redhat.com/support/errata/RHSA-2010-0896.html -
References () http://www.securityfocus.com/bid/44425 - () http://www.securityfocus.com/bid/44425 -
References () http://www.securitytracker.com/id?1024645 - () http://www.securitytracker.com/id?1024645 -
References () http://www.securitytracker.com/id?1024650 - () http://www.securitytracker.com/id?1024650 -
References () http://www.securitytracker.com/id?1024651 - () http://www.securitytracker.com/id?1024651 -
References () http://www.ubuntu.com/usn/USN-1011-2 - () http://www.ubuntu.com/usn/USN-1011-2 -
References () http://www.ubuntu.com/usn/USN-1011-3 - () http://www.ubuntu.com/usn/USN-1011-3 -
References () http://www.ubuntu.com/usn/usn-1011-1 - () http://www.ubuntu.com/usn/usn-1011-1 -
References () http://www.vupen.com/english/advisories/2010/2837 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/2837 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2010/2857 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/2857 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2010/2864 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/2864 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2010/2871 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/2871 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0061 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0061 - Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=607222 - () https://bugzilla.mozilla.org/show_bug.cgi?id=607222 -
References () https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53 - () https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=646997 - () https://bugzilla.redhat.com/show_bug.cgi?id=646997 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108 -
References () https://rhn.redhat.com/errata/RHSA-2010-0812.html - () https://rhn.redhat.com/errata/RHSA-2010-0812.html -

Information

Published : 2010-10-28 00:00

Updated : 2024-11-21 01:19


NVD link : CVE-2010-3765

Mitre link : CVE-2010-3765

CVE.ORG link : CVE-2010-3765


JSON object : View

Products Affected

mozilla

  • thunderbird
  • firefox
  • seamonkey
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer